pk2car Privacy Policy

01 Who We Are

pk2car is an online casino and sports betting platform operated under international gaming licence regulation and accessible at pk2car.app. For the purposes of this Privacy Policy, pk2car is the data controller responsible for the personal data you provide to us or that we collect about you during your use of the Platform.

Our platform is designed specifically for the Pakistani market, offering gaming services in English with PKR-denominated accounts and local payment options including JazzCash, EasyPaisa, and major Pakistani banks. All data processing activities described in this policy apply to users accessing the Platform from Pakistan and other permitted jurisdictions.

If you have any questions about how pk2car handles your personal data, please contact our Data Protection team at: [email protected]

02 How We Collect Data

pk2car collects personal data through the following means:

• Direct registration: When you create a pk2car account, you provide your name, date of birth, email address, phone number, and residential address directly to us via the registration form.
• Identity verification: During the KYC process, you may submit copies of identity documents such as your CNIC, passport, or utility bills. These documents are processed by our verification partners and retained in accordance with our legal obligations.
• Transaction activity: Every deposit, withdrawal, and bet placed on the Platform generates transaction data that is automatically recorded in our systems.
• Automated technical collection: When you visit or use the Platform, we automatically collect technical data including your IP address, device type, browser version, operating system, and session activity via server logs and analytics tools.
• Customer support interactions: If you contact our support team via email or live chat, the content of that communication is stored to enable effective resolution and quality monitoring.
• Cookies and similar technologies: We use cookies and similar tracking technologies as described in Section 8 of this policy.

03 How We Use Your Data

pk2car processes your personal data for the following purposes:

• Account management: To create, maintain, and administer your pk2car account, including processing your login credentials and account settings.
• Transaction processing: To process deposits, withdrawals, and bet settlements accurately and in a timely manner through your chosen payment method.
• Identity and age verification: To comply with our licensing obligation to verify that all users are at least 21 years of age and are who they claim to be before allowing withdrawals.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes, as required under our international gaming licence obligations.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, apply self-imposed limits and exclusions, and reach out proactively where we have reason to be concerned about a player's wellbeing.
• Customer support: To respond to your queries, resolve disputes, and improve the quality of our customer service based on interaction history.
• Marketing communications: Where you have opted in, to send you information about promotions, bonuses, and new features available on pk2car. You may withdraw consent at any time.
• Legal compliance: To retain records as required by applicable law, respond to lawful requests from regulatory authorities, and defend or pursue legal claims.
• Platform improvement: To analyse aggregated usage patterns and improve the functionality, performance, and content of the pk2car Platform.

04 Sharing Your Data

pk2car does not sell your personal data to any third party. We share your personal data only in the following circumstances and only to the extent necessary:

• Identity verification providers: We work with licensed third-party KYC providers to verify your identity and age. These providers process your identity documents strictly for verification purposes and are contractually bound to maintain confidentiality.
• Payment processors: Your payment details are shared with our payment processing partners (including JazzCash, EasyPaisa, HBL, UBL, and other supported providers) solely to the extent necessary to process your requested transaction.
• Fraud and AML detection services: We use specialist third-party tools to screen transactions for suspicious activity. Data shared with these providers is used solely for fraud and financial crime prevention.
• Regulatory and legal authorities: We may disclose personal data to our licensing regulator, law enforcement agencies, or courts where we are legally required or authorised to do so.
• Game and platform technology providers: Our casino game providers may receive pseudonymised session data necessary to deliver gameplay functionality. No directly identifying information is shared with game providers beyond what is required for game delivery.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of pk2car's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer before it takes effect.

All third parties with whom pk2car shares personal data are subject to written data processing agreements that require them to maintain appropriate confidentiality and security standards consistent with this policy.

05 International Transfers

pk2car operates under an international gaming licence, and some of the third-party providers we use to deliver our services may be located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than the country in which you reside.

Where personal data is transferred internationally, pk2car ensures that appropriate safeguards are in place to protect that data, including:

• Transferring data only to jurisdictions that provide an adequate level of data protection as determined by our licensing regulator;
• Using standard contractual data protection clauses in agreements with third-party recipients of personal data;
• Ensuring that recipients are contractually obligated to apply security measures equivalent to those applied by pk2car.

If you would like further information about the specific safeguards applied to any particular international data transfer, please contact us at [email protected].

06 Data Retention

pk2car retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and for as long as required to meet our legal, regulatory, and contractual obligations. The following general retention principles apply:

• Account data: Retained for the duration of your account and for a minimum of five years following account closure, as required by AML and gaming licence regulations.
• Transaction records: Retained for a minimum of five years from the date of the transaction to meet financial record-keeping obligations.
• KYC documents: Retained for the duration of your account and for five years after closure, in line with standard regulatory requirements.
• Support communications: Retained for three years from the date of the last interaction, unless a longer period is required in connection with an open dispute or legal matter.
• Marketing data: Retained until you withdraw your consent to receive marketing communications, after which it will be deleted or anonymised within 30 days.
• Technical and usage logs: Typically retained for 12 months in an identifiable form, after which they are aggregated and anonymised for analytics purposes.

When personal data is no longer required, it is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

07 Your Rights

As a data subject, you hold meaningful rights over the personal data that pk2car processes about you. We are committed to facilitating the exercise of these rights promptly and without unnecessary friction.

To exercise any of these rights, please contact us at [email protected] with a clear description of your request and your registered account details for identification purposes. We will respond within 30 days of receiving a valid request. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

08 Cookies & Tracking Technologies

pk2car uses cookies and similar technologies (including local storage and session tokens) to deliver, operate, and improve the Platform. The following categories of cookies are in use:

• Strictly necessary cookies: These are essential for the Platform to function. They include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled.
• Functional cookies: These remember your preferences, such as language settings and your last logged-in state, to improve your experience. They can be disabled, but doing so may affect Platform functionality.
• Analytics cookies: These collect anonymised information about how users navigate the Platform, which pages are visited most frequently, and where errors occur. This data is used solely to improve the Platform.
• Marketing cookies: Where you have provided consent, these cookies track your interaction with promotional content both on and off the Platform to help us serve relevant offers. You can withdraw consent for marketing cookies at any time via your account settings.

By continuing to use the pk2car Platform after being presented with our cookie notice, you consent to our use of non-essential cookies. You may adjust your cookie preferences at any time through the settings panel in your account dashboard or through your browser settings.

09 Minors & Age Policy

pk2car is strictly an 18+ platform with an additional voluntary 21+ age restriction adopted as standard practice across the Platform. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21.

All accounts are subject to mandatory age verification before withdrawals are permitted. Where pk2car discovers that personal data has been collected from a person under 21 years of age, we will:

• Immediately suspend the relevant account;
• Delete all personal data associated with the account to the extent permitted by law;
• Return any deposited funds to the payment method of origin after deducting any amounts won through use of the account;
• Report the matter to our licensing regulator where required to do so.

If you are a parent or guardian and believe that a minor under your care has registered on the pk2car Platform, please contact us immediately at [email protected] so that we can take prompt action.

10 Security Measures

pk2car takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the pk2car Platform;
• AES-256 encryption for personal data stored at rest on our servers;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for all staff who access systems containing personal data;
• Regular third-party security audits and penetration testing of the Platform;
• Intrusion detection systems and 24/7 monitoring of our infrastructure for anomalous activity.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, pk2car will notify affected users and the relevant regulatory authority within the timeframes required by applicable law.

11 Third-Party Services

The pk2car Platform may contain links to the policies or documentation of our licensing regulator or responsible gaming organisations for reference purposes. These third-party destinations operate under their own privacy policies, and pk2car accepts no responsibility for the privacy practices of any third party.

Where we engage third-party service providers who process personal data on our behalf (acting as data processors), we ensure that:

• We have a written data processing agreement in place with each processor;
• Each processor is contractually required to process data only on our documented instructions;
• Each processor implements appropriate technical and organisational security measures;
• Each processor assists us in meeting our obligations to data subjects, including facilitating the exercise of user rights.

A current list of our key data processors is available on request by contacting [email protected].

12 Policy Changes

pk2car reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify registered users by email and via an in-platform notification at least seven days before the updated policy takes effect.

The effective date at the top of this page will always reflect when the policy was last revised. We encourage you to review this page periodically to stay informed about how pk2car protects your personal data. Your continued use of the Platform after the effective date of a revised policy constitutes your acceptance of the changes.

13 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pk2car handles your personal data, please reach out to our Data Protection team in the first instance:

• Email: [email protected]
• Subject line: Please include "Privacy Request" or "Data Protection" in the subject of your email to ensure your message is routed to the right team promptly.
• Response time: We aim to acknowledge all privacy-related communications within two business days and provide a substantive response within 30 days.

If you are not satisfied with how we have handled your personal data or responded to your request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. We will always provide you with the contact details of the relevant authority upon request.