pkesy Privacy Policy

pkesy is an internationally licensed online gaming and sports betting platform operating at pkesy.org and serving English-speaking players across Pakistan. For the purposes of this Privacy Policy, pkesy acts as the data controller in respect of all personal data collected from registered players, prospective players, and visitors to the pkesy website.

As data controller, pkesy determines the purposes and means by which your personal data is processed. Where pkesy engages third-party service providers to process data on its behalf, those parties act as data processors and are bound by contractual data processing agreements consistent with the obligations set out in this Privacy Policy.

All queries, data subject requests, and complaints regarding pkesy's handling of personal data should be directed to our support team. Contact details are set out in Section 13 of this Policy.

pkesy collects personal data through several channels: directly from you during registration and ongoing account use; automatically through your interaction with the pkesy platform; and from third-party verification and payment partners where applicable. The categories of data we collect are set out in the table below.

pkesy processes your personal data only for the specific, lawful purposes set out below. We do not use your data for any purpose incompatible with those stated without first obtaining your consent or establishing a separate legal basis.

• Account Registration & Management: To create and maintain your pkesy account, verify your identity, and manage your account settings and preferences.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer in PKR, and to maintain accurate transaction records.
• KYC & Regulatory Compliance: To verify player identity and age (21+ requirement) as required under applicable international gaming regulations, and to fulfil anti-money laundering (AML) and counter-terrorist financing (CTF) obligations.
• Platform Delivery & Improvement: To operate and maintain the pkesy platform, diagnose technical faults, improve game performance, and develop new features based on aggregated usage patterns.
• Fraud Detection & Security: To detect and prevent fraudulent account activity, bonus abuse, money laundering, and unauthorised access to player accounts.
• Customer Support: To respond to support queries, process complaints, and maintain records of communications for training and quality assurance purposes.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and to apply responsible gaming tools including deposit limits, self-exclusion, and session reminders where appropriate.
• Marketing Communications (with consent): To send promotional emails, bonus notifications, and platform updates — only where you have provided explicit consent. You can withdraw marketing consent at any time from your account preferences.
• Legal & Regulatory Obligations: To comply with reporting obligations to regulatory authorities, respond to lawful requests from law enforcement, and to defend or pursue legal claims.

pkesy processes personal data under the following legal bases, consistent with applicable international data protection standards:

• Contractual Necessity: Processing required to perform the contract between pkesy and the Player — including account management, payment processing, and platform delivery.
• Legal Obligation: Processing required to comply with KYC, AML, and CTF regulatory obligations applicable to international gaming operators.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by the Player's data protection rights.
• Consent: Processing for direct marketing communications and non-essential cookies — where consent is freely given, specific, and revocable at any time.

pkesy does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment network operators solely to process your deposits and withdrawals in PKR. These processors are bound by their own regulatory obligations and by contractual data processing agreements with pkesy.

Identity documents and personal data are shared with our third-party KYC verification partner for the purpose of confirming your identity and age as required by international gaming regulations. KYC providers are contractually prohibited from using your data for any purpose other than verification.

pkesy shares relevant account and transaction data with fraud prevention and anti-money laundering service providers where required to detect and prevent financial crime. In cases of confirmed fraud or money laundering, data may be shared with law enforcement authorities in accordance with legal obligations.

pkesy may be required to disclose player data to the regulatory authority overseeing its international gaming licence, or to other competent authorities, where required by applicable law or valid legal process. pkesy will, where legally permitted, notify affected players of any such mandatory disclosure.

In the event of a merger, acquisition, or sale of the pkesy business or substantially all of its assets, player personal data may be transferred as part of that transaction. Players will be notified of any such transfer and the privacy terms applicable to the receiving entity prior to the transfer taking effect.

pkesy uses cookies and similar tracking technologies to maintain essential platform functionality, enhance user experience, and collect aggregated analytics data. The categories of cookies we use are as follows:

You may withdraw consent for non-essential cookies at any time through your pkesy account settings. Essential cookies cannot be disabled as they are required for the platform to function. Disabling analytics or preference cookies will not affect your ability to play or withdraw funds.

pkesy retains personal data for defined periods aligned to the purpose for which it was collected and to applicable regulatory retention requirements. Key retention periods are as follows:

• Account & Identity Data: Retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements.
• Transaction & Financial Records: Retained for a minimum of five (5) years from the date of the transaction, consistent with international financial record-keeping obligations.
• KYC Documents: Retained for the duration of the account relationship plus five (5) years following closure, or longer where required by applicable law or ongoing regulatory investigation.
• Customer Support Communications: Retained for three (3) years from the date of the communication, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained until consent is withdrawn plus two (2) years, to provide evidence of lawful marketing activity.
• Technical & Log Data: Retained for thirteen (13) months from the date of collection for security monitoring and platform performance analysis.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

As a pkesy account holder, you hold the following rights in respect of your personal data. pkesy will respond to all valid data rights requests within thirty (30) days of receipt. Complex requests may require an extension of up to a further sixty (60) days, of which you will be notified.

Please note that the right to erasure is subject to pkesy's regulatory data retention obligations. Where we are legally required to retain certain data, we will inform you of the specific retention obligation and the earliest date on which deletion can occur.

pkesy implements and maintains a comprehensive information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• AES-256 encryption for all personal and financial data stored at rest on pkesy servers
• TLS 1.3 encryption for all data transmitted between your device and the pkesy platform
• Multi-factor authentication options for player account login
• Role-based access controls ensuring only authorised pkesy staff access player data on a need-to-know basis
• Regular third-party penetration testing and vulnerability assessments of the pkesy platform infrastructure
• Automated intrusion detection and security monitoring systems operating 24/7
• Mandatory data security training for all pkesy staff with access to personal data
• Documented incident response procedures with a commitment to notify affected players within 72 hours of a confirmed data breach where that breach poses a risk to player rights

Notwithstanding the above measures, no internet-based platform can guarantee absolute security. Players are advised to maintain strong, unique passwords for their pkesy accounts and to enable available multi-factor authentication options. If you suspect your account has been compromised, contact pkesy support immediately.

pkesy operates under an international gaming licence. As a result, your personal data may be transferred to, stored, or processed in countries outside Pakistan. Such transfers occur where our service providers — including KYC verification partners, fraud prevention services, and cloud infrastructure providers — operate from jurisdictions other than Pakistan.

Where personal data is transferred internationally, pkesy ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to the protections described in this Privacy Policy. Safeguards used include contractual data processing agreements incorporating standard data protection clauses, and transfers to providers operating in jurisdictions with recognised adequate levels of data protection.

For further information about the specific safeguards applied to any international transfer of your data, please contact pkesy's support team.

The pkesy platform is strictly restricted to individuals who are 21 years of age or older. pkesy does not knowingly collect personal data from any person under the age of 21. The pkesy registration process includes mandatory age verification steps, and all accounts are subject to ongoing KYC age confirmation procedures.

If pkesy discovers that personal data has been collected from a person under the age of 21, that account will be immediately closed, any collected data will be deleted (subject to any mandatory retention obligations for regulatory reporting of underage gambling incidents), and any deposits will be returned to the original payment source.

If you believe that a person under 21 has registered a pkesy account, please notify our support team immediately. pkesy takes underage gambling prevention extremely seriously and will act on all such notifications without delay. For more information on our responsible gaming commitments, see the Responsible Gaming page.

pkesy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, pkesy will notify registered players by email to the registered account address and/or by a prominent in-platform notification at least seven (7) days before the revised Policy takes effect.

The current effective version of this Privacy Policy is always accessible at pkesy.org/privacy-policy. The "Effective Date" shown at the top of this page reflects the date of the most recently published version. We encourage you to review this Policy periodically to stay informed about how pkesy is protecting your data.

Continued use of the pkesy platform following notification of any material amendment to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you may close your account by contacting pkesy's support team prior to the amendment's effective date.

For any queries, data subject requests, or concerns regarding pkesy's handling of your personal data, please contact our support team through the following channels:

• Email: [email protected] — responses within 24 hours for general queries; within 30 days for formal data subject requests
• Live Chat: Available 24/7 directly within the pkesy platform — average first response under 2 minutes
• Support Hours: 24 hours a day, 7 days a week, with peak staffing aligned to Pakistan Standard Time (PKT, UTC+5)

If you are not satisfied with pkesy's response to a data-related complaint, you have the right to escalate the matter to the relevant data protection supervisory authority or to the regulatory authority overseeing pkesy's international gaming licence. pkesy will cooperate fully with any such regulatory investigation.