pk717 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how pk717 ("pk717", "we", "us", "our"), the operator of the online gaming platform accessible at https://pk717.org, collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who register for or use any pk717 service.

This Policy applies to all personal data collected through the pk717 website, mobile-optimised platform, customer support channels, and any other interaction you have with pk717. It should be read in conjunction with pk717's Terms & Conditions and Responsible Gaming policy.

2 Data Controller

For the purposes of applicable data protection legislation, pk717 is the data controller responsible for the personal data of its registered players and website visitors. As data controller, pk717 determines the purposes and means by which your personal data is processed.

pk717 operates under an international gaming licence and is subject to the data protection requirements imposed by its licensing authority, which include maintaining adequate safeguards for player data, conducting periodic data protection reviews, and cooperating with regulatory data requests. Our data protection contact can be reached at [email protected].

3 Personal Data We Collect

pk717 collects the following categories of personal data, depending on the nature of your interaction with the platform:

pk717 does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, or health data) unless it is voluntarily disclosed in the context of a responsible gaming self-exclusion request, in which case it is handled with the highest level of confidentiality.

4 How We Collect Your Data

pk717 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated technologies: When you access the pk717 platform, we automatically collect technical and usage data via server logs, cookies, pixel tags, and similar tracking technologies. See Section 8 for full details on our cookie usage.
• Third-party payment providers: When you transact via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, those providers may share limited transaction confirmation data with pk717 for reconciliation and fraud prevention purposes.
• Identity verification services: pk717 may use third-party KYC and AML screening services to verify identity documents and screen against applicable sanctions lists. These services return a verification result to pk717; original documents are not retained by the third party beyond the verification session.
• Fraud prevention and analytics providers: Aggregated and anonymised behavioural data may be supplemented by fraud scoring tools to protect the integrity of the pk717 platform and its players.

5 How We Use Your Personal Data

pk717 processes your personal data for the following purposes:

• Account management: To create, maintain, and administer your pk717 account, including processing login sessions and account security alerts.
• Service delivery: To enable your participation in casino games, sports betting markets, cricket betting, PSL wagering, and all other pk717 products.
• Payment processing: To process PKR deposits and withdrawals via your chosen payment method and to maintain accurate financial records.
• Identity verification and compliance: To verify your identity as required by our international gaming licence, and to comply with AML, CFT, and know-your-customer ("KYC") obligations.
• Responsible gaming: To monitor gaming patterns, implement self-imposed limits or exclusions, and identify players who may be experiencing gambling-related harm.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-accounting, and other prohibited conduct.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of our communications with you.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may withdraw this consent at any time through your account settings.
• Platform improvement: To analyse aggregated usage patterns, improve the pk717 user experience, test new features, and optimise platform performance.
• Legal obligations: To retain records as required by applicable law, respond to lawful regulatory requests, and enforce our Terms & Conditions.

6 Legal Basis for Processing

pk717 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and pk717 — including account creation, game participation, and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including AML regulations, licensing conditions, and tax reporting requirements.
• Legitimate interests: Processing carried out for pk717's legitimate business interests, including fraud prevention, platform security, and improvement of our services — where those interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent — for example, for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Data Sharing & Third Parties

pk717 does not sell or rent your personal data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, to process your deposits and withdrawals in PKR. Each provider operates under its own privacy policy and data handling standards.
• Identity verification providers: Third-party KYC and AML screening services engaged to verify your identity documents and screen against international sanctions lists as required by our licence.
• Game software providers: Licensed game studios and content aggregators whose games are offered on the pk717 platform. These providers may receive session and wagering data necessary to operate their games.
• IT and platform service providers: Cloud hosting, cybersecurity, analytics, and customer support technology vendors engaged by pk717 to operate and maintain the platform.
• Regulatory and law enforcement authorities: Where pk717 is legally required or permitted to do so by its licensing authority or by applicable law, including in response to a valid court order, subpoena, or regulatory instruction.
• Business transfers: In the event of a merger, acquisition, or sale of pk717's business or assets, player data may be transferred to the acquiring entity. Affected players will be notified prior to their data being transferred and becoming subject to a different privacy policy.

All third-party service providers engaged by pk717 are contractually required to process player data only for the specific purposes for which it was shared and to maintain appropriate security standards.

8 Cookies & Tracking Technologies

pk717 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse how the platform is used. The following types of cookies are deployed on pk717:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without disrupting platform functionality.
• Functional cookies: Remember your language preferences, display settings, and responsible gaming limits so that they persist across sessions.
• Analytics cookies: Collect anonymised data about how players navigate the pk717 platform, which pages are most visited, and where users encounter errors. This data helps pk717 improve the platform experience.
• Fraud prevention cookies: Used to identify unusual patterns of behaviour that may indicate fraudulent activity, including device fingerprinting to detect multiple account registrations from the same device.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing certain pk717 services. pk717 does not use third-party advertising or retargeting cookies.

9 Data Retention

pk717 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

• Account data: Retained for the duration of your account and for a period of five (5) years following permanent account closure, as required by AML and licensing regulations.
• Financial transaction records: Retained for a minimum of five (5) years following each transaction, in compliance with applicable financial record-keeping requirements.
• KYC documents: Retained for five (5) years following account closure or the date of the last verified transaction, whichever is later.
• Customer support communications: Retained for three (3) years following the resolution of the relevant support interaction.
• Marketing consent records: Retained for the duration of your opt-in status and for three (3) years following any withdrawal of consent, for compliance verification purposes.
• Technical and usage logs: Retained for a rolling period of thirteen (13) months for platform security and analytical purposes.

Where pk717 is involved in active legal proceedings, regulatory investigations, or dispute resolution processes, relevant data will be retained beyond the standard periods described above until those matters are fully resolved.

10 Data Security

pk717 implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• AES-256 encryption for all personal data stored at rest in pk717's databases.
• TLS 1.3 encryption for all data transmitted between your device and pk717's servers.
• Multi-factor authentication options for player accounts and mandatory multi-factor authentication for all pk717 staff accessing player data systems.
• Regular third-party penetration testing and vulnerability assessments of the pk717 platform infrastructure.
• Role-based access controls ensuring that pk717 staff can only access player data necessary for their specific job functions.
• Secure data centre hosting with physical access controls and 24/7 monitoring.
• A documented data breach response plan, including notification procedures in the event of a breach that poses a risk to your rights and freedoms.

While pk717 takes all reasonable and industry-standard steps to secure your data, no method of electronic transmission or storage is completely infallible. You also bear responsibility for maintaining the security of your own pk717 account credentials. If you believe your account has been compromised, contact support at [email protected] immediately.

11 Your Data Rights

Subject to applicable law and the conditions of pk717's international gaming licence, you have the following rights with respect to your personal data held by pk717:

• Right of access: You may request a copy of all personal data pk717 holds about you, along with information about how it is processed.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. You may also update most account details directly through your pk717 account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to pk717's legal and regulatory retention obligations.
• Right to restriction: You may request that pk717 restricts the processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a structured, machine-readable copy of the personal data you provided to pk717.
• Right to object: You may object to processing carried out on the basis of pk717's legitimate interests. Where such an objection is made, pk717 will cease the relevant processing unless there are compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. pk717 will respond to all verified data rights requests within thirty (30) days of receipt. We may request proof of identity before processing your request.

12 Minors & Age Policy

pk717 strictly prohibits the use of its platform by any person under the age of 21. pk717 does not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory component of the pk717 KYC process and is conducted prior to the release of any withdrawal.

If pk717 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, void all associated transactions, and delete or anonymise the data to the extent not required for regulatory reporting purposes.

If you are a parent or guardian and believe that a minor has registered a pk717 account, please contact us immediately at [email protected] so that we may take prompt remedial action.

13 International Data Transfers

As an internationally licensed gaming operator, pk717 may process and store personal data on servers located outside of Pakistan. Where personal data is transferred to jurisdictions that may not provide the same level of data protection as your home country, pk717 ensures that appropriate safeguards are in place, including:

• Contractual clauses with data processors that impose equivalent data protection obligations.
• Transfer only to jurisdictions or recipients that offer an adequate level of data protection as determined by the relevant regulatory framework.
• Implementation of technical and organisational measures that compensate for any differences in local data protection standards.

You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting us at [email protected].

14 Changes to This Privacy Policy

pk717 reserves the right to update this Privacy Policy at any time. When material changes are made — for example, changes that affect the purposes for which your data is used, the categories of data collected, or your rights — pk717 will notify you by:

• Sending an email notification to the address registered on your pk717 account.
• Displaying a prominent in-platform notification when you next log in.
• Updating the "Last Updated" date at the top of this page.

Where a material change involves a new or different use of your personal data and that use requires your consent, pk717 will obtain fresh consent before the new processing commences. Your continued use of the pk717 platform following notification of a non-consent-based change constitutes acceptance of the updated Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to pk717's processing of your personal data, please contact our data protection team through the following channels:

• Email: [email protected] — data rights requests, privacy queries, and data breach reports. We respond within 2 hours for urgent matters and within 30 days for formal data rights requests.
• Live Chat: Available 24/7 through your pk717 account dashboard for general privacy queries.
• FAQ: Visit our FAQ page for answers to common questions about account data and privacy settings.

All privacy-related communications with pk717 must be conducted in English. Please include your registered email address and a clear description of your request or concern to help us respond as efficiently as possible.