pka75 Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by pka75 (hereinafter "pka75", "we", "us" or "our"), the operator of the online gaming platform accessible at pka75.cam (hereinafter "the Platform"). This Policy governs the collection, use, storage, transfer and deletion of personal data belonging to users of the Platform (hereinafter "User", "you" or "your").

pka75 is an international online gaming platform. It is not a locally licensed operator under Pakistani law and does not hold any licence, approval or endorsement from the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, or any Pakistani provincial or financial authority. This Policy does not constitute legal advice.

By registering an account, making a deposit, placing a wager, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not consent, you must not use the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" — Any operation performed on personal data, whether or not by automated means, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For users of pka75.cam, the Data Controller is pka75.
• "Data Processor" — A natural or legal person that processes personal data on behalf of the Data Controller, under contract and in accordance with the Data Controller's instructions.
• "KYC" — Know Your Customer: the identity and age verification process mandated by applicable anti-money laundering (AML) and regulatory frameworks.
• "Consent" — Any freely given, specific, informed and unambiguous indication by which a data subject signals agreement to the processing of their personal data for a specified purpose.
• "Special Category Data" — Personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, genetic or biometric data, or data concerning a person's sexual orientation. pka75 does not intentionally collect special category data unless required by applicable law.

The Data Controller responsible for personal data collected through the Platform is pka75, operating the domain pka75.cam. For data protection queries, users may contact the Data Controller through the support channels described in Section 16 of this Policy.

Where pka75 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification services, customer support software providers or analytics platforms — those providers act as Data Processors under contract. They are permitted to process personal data only on documented instructions from pka75 and are bound by appropriate data protection obligations.

pka75 collects personal data in the following categories, depending on the nature of your interaction with the Platform:

4.1 Registration & Account Data

• Full legal name;
• Date of birth (for age verification);
• Email address;
• Username and password (stored in hashed form);
• Country and city of residence (e.g., Karachi, Lahore, Islamabad);
• Preferred contact language (English / Urdu).

4.2 Identity Verification (KYC) Data

• Government-issued photo identity document — for Pakistani users, typically a valid CNIC (Computerised National Identity Card) or passport;
• Proof of residential address (e.g., utility bill or bank statement);
• Selfie photograph or liveness-check image as required by the verification process;
• Payment method ownership verification documents where applicable.

4.3 Financial Transaction Data

• Deposit amounts, timestamps and payment method references;
• Withdrawal amounts and processing records;
• Transaction identifiers required for AML audit trails;
• Currency denomination (e.g., PKR equivalent values).

4.4 Usage & Technical Data

• IP address and geolocation data (at country and city level);
• Device type, operating system and browser information;
• Session timestamps and duration;
• Pages and features accessed within the Platform;
• Game session records, wager history and account activity logs.

4.5 Communications Data

• Content of Live Chat support sessions;
• Email correspondence with the support team;
• Formal complaint records.

pka75 processes personal data for the following purposes:

pka75 processes personal data only where a valid lawful basis exists. The applicable bases are:

• Contractual Necessity: Processing required to perform the contract between pka75 and you — including account management, game provision, payment processing and customer support;
• Legal Obligation: Processing required to comply with applicable law — including AML regulations, age verification requirements, tax record-keeping and regulatory reporting obligations under the licensing framework applicable to pka75;
• Legitimate Interests: Processing carried out for pka75's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, platform security, abuse detection and general platform integrity;
• Consent: Processing based on your freely given, specific, informed consent — primarily applicable to marketing communications and optional data analytics. You may withdraw consent at any time by contacting support or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

pka75 does not sell, rent or trade personal data with third parties. Personal data may be shared with third parties only in the following strictly limited circumstances:

• Payment Processors: Transaction data is shared with payment service providers strictly to facilitate deposit and withdrawal processing. These providers operate under their own data protection policies and are bound by contractual obligations to pka75;
• Identity Verification (KYC) Providers: Document and biometric data submitted during the KYC process may be processed by a third-party identity verification service acting as a Data Processor under contract;
• Customer Support Platforms: Live Chat and help-desk software providers may process communication data on pka75's behalf to facilitate customer support;
• Fraud Prevention & Security Services: Technical data (IP addresses, device fingerprints, behavioural signals) may be processed by fraud detection and AML screening services;
• Regulatory Authorities: Where required by law, court order, or instruction from a competent regulatory or law enforcement authority, pka75 may be required to disclose personal data. We will inform you of such disclosure where legally permitted to do so;
• Business Transfers: In the event of a merger, acquisition or sale of substantially all of pka75's assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

As an international online gaming platform, pka75 may transfer personal data to countries outside the user's jurisdiction of residence, including outside Pakistan. Such transfers may occur in connection with our use of third-party Data Processors for KYC, payment processing or customer support infrastructure.

Where personal data is transferred internationally, pka75 takes reasonable steps to ensure that appropriate safeguards are in place — including contractual protections between pka75 and its Data Processors. Users are advised that Pakistan's data protection framework is still evolving; users accessing pka75 from Pakistan do so acknowledging this context.

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention principles apply:

• Account & Registration Data: Retained for the duration of the active account relationship, plus a reasonable post-closure retention period as required by regulatory and AML obligations (typically a minimum of five years post-closure, in line with standard anti-money laundering retention standards);
• KYC & Identity Documents: Retained for the period required by applicable AML and regulatory law following account closure;
• Financial Transaction Records: Retained for the period required under applicable financial regulations applicable to the Platform's licensed jurisdiction;
• Usage Logs & Session Data: Retained for a limited operational period for fraud and security purposes, unless extended retention is required by legal obligation;
• Marketing Communications Data: Retained only while active consent exists. Upon withdrawal of consent or unsubscription, marketing data will be suppressed or deleted within a reasonable timeframe;
• Support & Communications Data: Retained for a reasonable period to support dispute resolution and quality assurance, then deleted or anonymised.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Subject to applicable law and the limitations described below, you have the following rights in respect of your personal data held by pka75:

To exercise any of the above rights, please contact us via Live Chat or by email at support [at] pka75.cam (plain text — not a clickable link). We will respond within a reasonable timeframe and may require identity verification before processing your request. Where requests are manifestly unfounded or excessive, pka75 reserves the right to charge a reasonable fee or refuse the request, providing reasons in writing.

pka75.cam uses cookies and similar tracking technologies to operate the Platform, maintain session state, protect against fraud, and — where consented — measure platform usage through analytics. The following cookie categories are in use:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies and load-balancing cookies. They cannot be disabled without impairing core Platform functionality;
• Functional Cookies: Used to remember your preferences — such as language selection or responsible gambling limit settings — across sessions;
• Analytics Cookies (with consent): Used to measure aggregate platform usage patterns, such as which pages are visited most frequently and how users navigate the Platform. These cookies do not identify you individually;
• Fraud Detection & Security Cookies: Used to identify suspicious behaviour, detect multi-accounting or bot activity, and protect the Platform from abuse.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Withdrawing consent for analytics cookies does not affect your ability to access or use the Platform.

The Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the applicable operator/license jurisdiction. pka75 does not knowingly collect or process personal data of individuals under the applicable minimum age.

Age verification is a mandatory step of the KYC process and must be completed before full account access is granted. If pka75 becomes aware that personal data has been collected from a minor, that data will be deleted promptly and the associated account will be closed. Users have a responsibility not to allow minors to access their accounts.

pka75 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration and destruction:

• HTTPS/SSL encryption on all pages, login sessions, payment flows and account management interactions;
• Password hashing — user passwords are stored using industry-standard hashing algorithms and are never stored in plain text;
• Access controls — access to personal data within pka75 is restricted on a need-to-know basis;
• Data minimisation — only data necessary for the defined purpose is collected and retained;
• Vendor due diligence — third-party Data Processors are assessed for data security compliance before onboarding and subject to contractual data protection obligations;
• Incident response procedures — pka75 maintains documented procedures for identifying, assessing and responding to personal data security incidents.

While pka75 takes reasonable and proportionate security precautions, no internet transmission or electronic storage system can be guaranteed to be 100% secure. Users are responsible for maintaining the security of their own account credentials and for reporting suspected unauthorised access promptly.

Identity documents submitted as part of the KYC verification process — including CNIC, passport, proof of address and selfie/liveness images — are among the most sensitive categories of data pka75 holds. The following specific protections apply:

• KYC documents must be submitted exclusively through the Platform's secure HTTPS verification portal. Do not send identity documents via WhatsApp, Telegram, email, social media or any external unsecured channel;
• KYC document data is processed by a contracted identity verification provider and is not shared with any third party outside of regulatory reporting obligations;
• Documents are retained for the minimum period required by applicable AML and regulatory law, after which they are securely deleted;
• pka75 staff with access to KYC data are bound by confidentiality obligations;
• Submission of falsified, altered or fraudulent identity documents constitutes a breach of the Terms & Conditions, may constitute a criminal offence, and will result in immediate account closure and report to relevant authorities where required.

pka75 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform functionality or our data processing practices. Material amendments will be communicated to registered users via email notification or a prominent notice on the Platform prior to the amended Policy taking effect.

The current effective version of this Privacy Policy is always available at pka75.cam/privacy-policy. The "Effective" date at the top of this document indicates when the current version entered into force. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy.

For any questions, concerns or requests relating to this Privacy Policy or the personal data pka75 holds about you, please contact us through the following channels:

• Live Chat: Available 24/7 through the Platform at pka75.cam;
• Help Centre: Visit pka75.cam/faq for answers to common questions about data, KYC and account management;
• Email (plain text — not a clickable link): support [at] pka75.cam

Support is available in English at all times. Urdu-speaking agents are available during peak hours for users who prefer to communicate in Urdu.

When submitting a data rights request (such as a subject access request or erasure request), please include sufficient information to allow us to identify your account. We will respond within a reasonable timeframe and may request additional identity verification before processing the request.

This Privacy Policy was last updated and is effective as of 2026. pka75 reserves all rights not expressly granted herein.