Privacy Policy

1. Who We Are

This Privacy Policy is issued by pk19 ("pk19", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at pk19.app (the "Platform"). pk19 operates under an international gaming licence and serves players across Pakistan, including in Karachi, Lahore, Islamabad, Faisalabad, and beyond.

For the purposes of this Privacy Policy, pk19 acts as the data controller in respect of the personal data of registered players and Platform visitors. This means pk19 determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the pk19 Platform, our customer support channels, our email communications, and any other point of interaction between you and pk19. It should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

2. Personal Data We Collect

Depending on how you use the pk19 Platform, we may collect and process the following categories of personal data:

2.1 Identity & Registration Data

• Full legal name (as it appears on your Pakistani CNIC)
• Date of birth
• Pakistani CNIC number and copies of CNIC (both sides)
• Gender
• Nationality
• Photograph (where provided for identity verification)

2.2 Contact Data

• Email address
• Pakistani mobile phone number
• Residential address (city, province, postal code)

2.3 Financial Data

• JazzCash or EasyPaisa mobile wallet number and account name
• Bank account details (account title, account number, IBAN) for HBL, UBL, Meezan Bank, or other linked accounts
• Transaction history: deposits, withdrawals, amounts, dates, and payment methods used
• Proof of payment method documentation submitted during KYC

2.4 Gaming & Betting Activity Data

• Bet history, game history, and wagering records
• Bonus and promotion usage records
• Session duration, login timestamps, and activity patterns
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

2.5 Technical & Device Data

• IP address
• Device type, operating system, and browser type
• Unique device identifiers
• Geolocation data (city/region level, derived from IP address)
• Cookies and similar tracking technologies (see Section 7)

2.6 Communications Data

• Records of your interactions with pk19 customer support via live chat and email
• Feedback, complaints, and dispute correspondence
• Email marketing preferences and opt-in/opt-out records

3. How We Collect Your Data

pk19 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or interact with any feature of the Platform.
• Automatically — when you visit or use the Platform, our systems automatically collect technical and device data, including IP address, browser type, and session data, via cookies and server logs.
• From third parties — including identity verification and KYC service providers, payment processors (JazzCash, EasyPaisa, partner banks), fraud prevention services, and our licensing authority where required for compliance purposes.

4. Why We Use Your Personal Data

The table below summarises the primary purposes for which pk19 processes your personal data:

5. Legal Bases for Processing

pk19 processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing your identity, contact, and financial data is necessary to enter into and perform our contract with you — specifically to open and operate your pk19 account, process deposits and withdrawals, and provide access to games and betting markets.
• Legal obligation: Processing for KYC verification, AML compliance, fraud prevention, and reporting to our licensing authority is required by the legal and regulatory obligations imposed on pk19 under its international gaming licence.
• Legitimate interests: Processing for platform security, fraud detection, responsible gaming monitoring, and improving our services is carried out based on pk19's legitimate interests in operating a safe, fair, and sustainable gaming platform — provided those interests are not overridden by your privacy rights.
• Consent: Where pk19 sends you marketing communications or uses non-essential cookies, we do so on the basis of your explicit consent. You may withdraw consent for marketing at any time by updating your preferences in your account settings or by contacting support.

6. Sharing Your Personal Data

pk19 does not sell or rent your personal data. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, Raast, 1LINK, and partner banks (HBL, UBL, Meezan Bank) receive financial and identity data strictly to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party verification services receive identity documents and biometric data solely to complete mandatory identity checks required under our gaming licence.
• Fraud prevention and AML compliance services: Specialised compliance technology providers may receive transaction and behavioural data to support fraud detection and AML monitoring. All such providers operate under strict data processing agreements.
• Our licensing authority: pk19 is required to report certain player data and activity records to our international gaming regulator as a condition of our licence. Such disclosures are made only to the extent required by regulation.
• Legal and regulatory authorities: pk19 may disclose personal data to law enforcement, government bodies, or courts where required to do so by applicable law, court order, or regulatory direction.
• IT and infrastructure service providers: Cloud hosting, data storage, and cybersecurity providers who support the technical operation of the Platform. These providers process data only on pk19's instructions and under binding data processing agreements.

7. Cookies & Tracking Technologies

pk19 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, keep you securely logged in, remember your preferences, and analyse how the Platform is being used. The following categories of cookies are in use:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your language preference, game settings, and other personalisation choices to improve your experience on repeat visits.
• Analytics cookies: Collect anonymised, aggregated data about how players navigate and use the Platform. This helps pk19 identify areas for improvement. No individually identifiable data is shared with analytics providers.
• Marketing cookies: Used only with your explicit consent to personalise promotional content shown to you within the pk19 Platform. pk19 does not use third-party advertising cookies that track you across external websites.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the Platform. Your consent to non-essential cookies can also be updated via the cookie preferences panel available on the Platform.

8. Data Security

pk19 takes the security of your personal data seriously and implements robust technical and organisational measures to protect it from unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL/TLS 256-bit encryption for all data transmitted between your device and pk19's servers.
• AES-256 encryption for sensitive data stored at rest, including payment details and identity documents.
• Multi-factor authentication options for player accounts and strict internal access controls for pk19 staff.
• Regular penetration testing and security audits conducted by independent third-party cybersecurity specialists.
• Intrusion detection systems and 24/7 security monitoring of pk19's infrastructure.
• Staff training on data protection obligations and strict need-to-know access policies for personal data.

9. Data Retention

pk19 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by our licensing authority and applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account being open and active on the Platform.
• KYC and identity documents: Retained for a minimum of 5 years following account closure, as required under anti-money laundering regulations applicable to our international gaming licence.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 3 years from the date of the interaction.
• Technical and device data (server logs): Retained for a rolling period of 12 months for security and fraud detection purposes.
• Marketing consent records: Retained for the duration of your consent and for 2 years following withdrawal of consent, for compliance audit purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10. Your Privacy Rights

As a pk19 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] or via live chat. pk19 will respond to all valid requests within 30 days.

• Right of access: You may request a copy of all personal data pk19 holds about you, along with information about how and why it is being processed.
• Right to rectification: If any personal data pk19 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to pk19's legal and regulatory retention obligations.
• Right to restriction of processing: In certain circumstances, you may request that pk19 restrict the processing of your data while a query or objection is being resolved.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request your data in a structured, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. pk19 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

11. Children & Minors

pk19 is strictly for adults aged 21 years and above. We do not knowingly collect, store, or process the personal data of individuals under the age of 21. All accounts are subject to mandatory age verification as part of the KYC process.

If pk19 becomes aware that personal data belonging to a person under 21 has been collected — whether through misrepresentation during registration or otherwise — that account will be immediately suspended, all data will be reviewed by our compliance team, and the data will be securely deleted in accordance with our legal obligations. Any funds associated with an underage account will be returned to the verified payment source.

Parents and guardians who suspect that a minor may have registered on the Platform should contact pk19 support immediately via live chat or at [email protected].

12. Changes to This Privacy Policy

pk19 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the services we offer. When we make material changes, we will notify registered players via email and/or a prominent notice on the Platform at least 7 days before the changes come into effect.

The most current version of this Privacy Policy will always be available on this page, along with the effective date shown at the top of the document. We encourage you to review this Policy periodically. Your continued use of the pk19 Platform after any update has taken effect constitutes your acknowledgement of the revised Policy.

13. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pk19 handles your personal data, please reach out to us through any of the following channels:

• Live Chat: Available 24/7 in Urdu and English directly on the pk19 Platform — the fastest way to get a response.
• Email: [email protected] — for formal data subject requests, please include "Privacy Request" in the subject line.

pk19 aims to resolve all privacy-related queries promptly and fairly. If, after contacting us, you remain unsatisfied with our response to your concern, you retain the right to escalate the matter to the relevant data protection supervisory authority or to the independent dispute resolution body designated under our gaming licence.