pkpuls Privacy Policy

pkpuls ("the Platform", "we", "us", "our") is committed to protecting the personal data of every player who interacts with our services. This Privacy Policy sets out, in clear and transparent terms, the categories of personal data we collect, the legal bases on which we process that data, the purposes for which it is used, and the rights available to you as a data subject.

This policy applies to all users of pkpuls, including players based across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, Multan, and every other city and town from which our platform is accessed. Whether you are browsing the pkpuls website without an account, creating a new registration, making a deposit via JazzCash or EasyPaisa, or using our live cricket betting product during a PSL fixture, this policy governs how your data is handled throughout.

pkpuls is operated under an international gaming license. Our data protection obligations are defined by the requirements of that licensing jurisdiction, supplemented by our own internal privacy standards which in many respects exceed the minimum regulatory requirements.

pkpuls collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third parties during identity and payment verification. The categories of data we collect are detailed below.

pkpuls does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is required for standard KYC identity verification purposes.

Every piece of personal data collected by pkpuls is used for a specific, documented purpose. We do not process your data in ways that are incompatible with the purposes listed below without first seeking your consent or identifying a new lawful basis for processing.

• Account Creation and Management: We use your identity and contact data to register your pkpuls account, verify your identity, manage your profile settings, and communicate important account-related updates to you.
• Transaction Processing: Your financial data is used to process deposits and withdrawals across our supported PKR payment channels including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer.
• Regulatory Compliance (KYC/AML): We are required by our gaming license to verify the age, identity, and source of funds of all players. This involves processing your identity documents and financial records in line with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations.
• Responsible Gaming: Your behavioural data and account activity are analysed to detect signs of problem gambling. Where our responsible gaming algorithms identify concerning patterns, pkpuls may proactively contact you or apply protective account restrictions in line with our responsible gaming obligations.
• Platform Security: Technical and behavioural data is used to detect and prevent fraud, account takeover attempts, multi-accounting, bot activity, and other forms of abuse that could harm you or other pkpuls players.
• Customer Support: Communications data is used to handle your support queries, investigate complaints, and improve our service quality over time.
• Marketing Communications: With your consent, we may use your contact data to inform you about promotions, bonuses, and offers relevant to your interests. You may withdraw consent for marketing communications at any time via your account settings or by contacting support.

pkpuls does not sell your personal data. We do not share your information with third parties for their own marketing purposes. Data sharing by pkpuls is limited to the following categories of recipient, and only to the extent necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors receive only the financial and identity data required to process your specific transaction.
• Identity Verification Partners: Third-party KYC service providers receive identity documents and associated data solely for the purpose of verifying your age and identity as required by our gaming license.
• Game Content Providers: Casino game studios such as Evolution Gaming and Pragmatic Play may receive session and gameplay data necessary to deliver their games and calculate outcomes. These providers operate under strict data processing agreements with pkpuls.
• Regulatory Authorities: pkpuls is required to share certain player data — including transaction records and identity information — with our licensing authority and, where required by law, with financial intelligence units or law enforcement agencies in connection with AML investigations.
• Technology and Infrastructure Partners: Hosting providers, cloud infrastructure services, and cybersecurity partners may process your data as part of delivering the technical foundation on which pkpuls operates. All such partners are contractually bound to process data only as directed by pkpuls and to maintain appropriate security standards.

All third-party processors who receive personal data from pkpuls are subject to a Data Processing Agreement that prohibits them from using that data for any purpose beyond the stated scope and requires them to maintain appropriate technical and organisational security measures.

pkpuls uses cookies and similar tracking technologies on its website and mobile platform to deliver core functionality, analyse usage patterns, and support security operations. The categories of cookies deployed by pkpuls are as follows:

• Strictly Necessary Cookies: These cookies are essential to the operation of the pkpuls platform. They maintain your login session, store your currency preference (PKR), and enable security features such as CSRF protection. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred game categories, language setting, and responsible gaming tool configurations — so you do not have to re-enter them each session.
• Analytics Cookies: pkpuls uses analytics tools to understand how players navigate the platform, which features are most used, and where technical issues arise. This data is aggregated and anonymised wherever possible and is used solely to improve the pkpuls user experience.
• Security Cookies: These cookies support fraud detection and bot prevention systems, helping pkpuls identify and block suspicious activity before it can harm your account or the integrity of the platform.

pkpuls retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration your account remains active on pkpuls, plus a post-closure retention period as described below.
• KYC and Identity Documents: Retained for a minimum of five years following account closure, in line with standard AML record-keeping requirements applicable to internationally licensed gaming operators.
• Financial Transaction Records: Retained for a minimum of five years following the date of the transaction, consistent with financial record-keeping obligations under our gaming license.
• Support Communications: Retained for three years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained until you withdraw consent, plus a short additional period to evidence the withdrawal of consent.
• Technical and Log Data: Typically retained for 90 days in raw form, with anonymised aggregate data retained for longer periods for analytical purposes.

When data is no longer required and no legal obligation requires its continued retention, pkpuls permanently deletes or anonymises it using secure data destruction procedures.

pkpuls takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures designed to protect your information against unauthorised access, loss, alteration, or disclosure.

• All data in transit between your device and pkpuls servers is encrypted using TLS 1.2 or higher. We enforce HTTPS across the entire platform — there are no unencrypted pages or endpoints.
• Sensitive data at rest — including financial records and identity documents — is stored in encrypted form using industry-standard encryption algorithms.
• Access to personal data within pkpuls is governed by a strict role-based access control policy. Staff members access only the data categories required for their specific function.
• pkpuls employs OTP-based two-factor authentication for player account logins on new or unrecognised devices, providing an additional layer of protection against unauthorised access.
• Our platform is subject to regular security assessments, including penetration testing and vulnerability scanning, conducted by qualified security professionals.
• In the event of a data breach that poses a risk to your rights and freedoms, pkpuls will notify affected players and relevant regulatory authorities within the timeframes required under our licensing obligations.

As a pkpuls player, you have a number of rights in relation to the personal data we hold about you. pkpuls respects these rights and has processes in place to handle requests efficiently and transparently.

• Right of Access: You may request a copy of the personal data pkpuls holds about you. We will provide this in a structured, commonly used format within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. For basic profile updates, you can make changes directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis applies. Note that legal retention obligations — such as the five-year AML record-keeping requirement — may mean we cannot delete all data immediately upon request.
• Right to Restriction: In certain circumstances, you may request that pkpuls restricts its processing of your data — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or the performance of our contract with you, you may request your data in a machine-readable format suitable for transfer to another service provider.
• Right to Object: You may object to processing based on pkpuls's legitimate interests, including profiling for responsible gaming purposes. pkpuls will assess each objection on its merits and cease processing unless compelling legitimate grounds exist.
• Right to Withdraw Consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact pkpuls through our 24/7 live chat support channel. We may need to verify your identity before processing a data rights request. We will acknowledge all requests within 5 business days and provide a substantive response within 30 days.

pkpuls operates a strict 21+ age policy. Our platform is not directed at, and does not knowingly collect personal data from, any individual under the age of 21. Age verification is a mandatory step in the pkpuls KYC process, and accounts where a player is found to be under 21 will be immediately and permanently closed.

If you are a parent or guardian and believe that a minor has created an account on pkpuls using false age information, please contact our support team via live chat immediately. We will investigate the matter and, if confirmed, close the account, return any real-money balance in accordance with our regulatory obligations, and purge the minor's personal data from our systems to the greatest extent permitted by law.

pkpuls may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable regulations, or operational requirements. When we make material changes to this policy, we will notify active players through a prominent notice on the pkpuls platform and, where appropriate, by direct communication to your registered contact details.

The effective date at the top of this page will always reflect when the current version of the Privacy Policy came into force. We recommend bookmarking this page and reviewing it periodically, particularly before making deposits or sharing new personal information with pkpuls.

Your continued use of pkpuls following publication of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with a revised policy, you should cease using the platform and contact support to close your account.

For any questions, concerns, or formal requests relating to this Privacy Policy or the personal data pkpuls holds about you, please use the following contact options:

• Live Chat Support: Available 24/7 directly through the pkpuls platform. This is the fastest way to reach our team for data rights requests, privacy concerns, or general questions about how your data is handled.
• Email: You may also contact our support team by writing to [email protected] — displayed here as plain text only for reference, not as a clickable link.

For formal data rights requests (access, erasure, portability, rectification), please initiate contact via live chat and specify the nature of your request clearly. We will guide you through the identity verification step and begin processing your request within the timeframes stated in Section 08 of this policy.