pk198 Privacy
Policy

pk198 is an internationally licensed online gaming operator providing sports betting, live casino, slot games, cricket betting, fishing games, and related entertainment services to registered players through the platform accessible at pk198.org.

For the purposes of this Privacy Policy, pk198 acts as the data controller — meaning pk198 determines the purposes and means by which your personal data is processed. Any reference to "pk198", "we", "us", or "our" in this document refers to the pk198 platform operator in its capacity as data controller.

If you wish to contact pk198 specifically in relation to data protection matters, please email [email protected] with the subject line "Data Protection Enquiry" and our team will route your message to the appropriate personnel. All data protection requests are acknowledged within 24 hours and substantively addressed within 30 days.

pk198 collects personal data through several channels — directly from you when you register or use our services, automatically through your interactions with the pk198 platform, and occasionally from trusted third parties such as payment processors and identity verification providers. The categories of information we collect are as follows:

2.1 Registration & Account Data

• Full legal name, date of birth, and gender
• Residential address (city, province — Karachi, Lahore, Islamabad, Faisalabad, and elsewhere in Pakistan)
• Email address and mobile phone number
• Username and encrypted password
• Security questions and answers (stored in hashed form)

2.2 Identity Verification (KYC) Data

• Government-issued photo ID (National Identity Card / CNIC, passport, or driving licence)
• Proof of address documentation
• Selfie or liveness verification image (used solely for identity matching purposes)
• Source of funds declaration (for high-value players, as required under AML regulations)

2.3 Financial & Transaction Data

• JazzCash account identifier and transaction reference numbers
• EasyPaisa mobile wallet details and transaction references
• Bank account details for HBL, UBL, and Meezan Bank transfers
• Raast payment ID where applicable
• Visa and Mastercard last-four digits, expiry date, and billing address (full card numbers are never stored by pk198 — they are processed directly by our PCI-DSS-certified payment partners)
• Deposit and withdrawal history, including amounts, dates, and payment method used

2.4 Gaming & Betting Activity Data

• Game session logs, bet placements, stake amounts, and outcomes
• Cricket betting market selections and settlement records
• Slot and live casino session duration, RTP statistics at the account level
• Bonus claims, wagering progress, and promotional interaction history
• Responsible gaming tool usage (deposit limits, session reminders, self-exclusion requests)

2.5 Technical & Device Data

• IP address and approximate geolocation (country and city level only)
• Device type, operating system, browser type, and version
• Device fingerprint (used for fraud detection and account security)
• Session timestamps, login history, and platform navigation logs
• Cookie data and similar tracking technologies (see Section 5)

2.6 Communications Data

• Live chat transcripts and email correspondence with pk198 support
• Complaint and dispute records
• Marketing preference settings and communication opt-in/out status
• Survey and feedback responses where voluntarily submitted

pk198 uses your personal data only for the purposes for which it was collected and for compatible purposes that you would reasonably expect from an online gaming operator. The following table summarises our primary data uses:

pk198 will not use your personal data for automated decision-making that produces legal or similarly significant effects without providing you the right to request human review of any such decision. Account risk assessments conducted by pk198's fraud systems that trigger account restrictions are subject to human review upon request.

pk198 processes your personal data on the following legal bases, consistent with internationally recognised data protection standards:

• Contract Performance: Processing that is necessary to deliver the pk198 gaming services you have registered for — including account management, game provision, and payment processing. Without this processing, pk198 cannot fulfil its contractual obligations to you.
• Legal Obligation: Processing required to comply with our obligations under applicable AML regulations, gaming licence conditions, tax reporting requirements, and law enforcement requests. This includes KYC identity verification, transaction monitoring, and self-exclusion record-keeping.
• Legitimate Interest: Processing carried out in pk198's legitimate business interests where those interests are not overridden by your privacy rights. This includes fraud detection, platform security, responsible gaming behavioural monitoring, and improving our services using aggregated analytics.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This applies primarily to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

pk198 uses cookies and similar technologies (including local storage, session storage, and device fingerprinting) to operate the pk198 platform, maintain your login session, detect fraud, and understand how players use our services. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the pk198 platform to function. These include session authentication cookies that keep you logged in, security tokens, and CSRF protection cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language, preferred payment method, game lobby view settings, and responsible gaming tool configuration. These improve your experience but are not essential to basic platform operation.
• Analytics Cookies: Used by pk198 to understand aggregate player behaviour — which games are most popular, how players navigate the lobby, and where technical issues occur. These are always anonymised or pseudonymised before analysis. pk198 does not share raw analytics data with third parties.
• Security & Fraud Detection: Device fingerprinting and behavioural analytics used to identify unusual account activity, detect multi-accounting, and flag potentially fraudulent transactions. These operate in the background and are not visible to users.

You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of pk198, particularly authentication and session management features. The pk198 platform does not respond to "Do Not Track" browser signals as there is no universally accepted standard for interpreting these signals.

pk198 does not sell your personal data. We share your personal data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, Visa, and Mastercard processing partners receive the transaction data necessary to process your deposits and withdrawals. These providers are contractually bound to process your data only for payment purposes and to maintain appropriate security standards.
• Identity Verification Providers: Third-party KYC service providers receive the identity documents and biometric data necessary to complete age and identity verification. These providers are certified against applicable identity verification standards and may not use your data for any purpose other than completing the verification requested by pk198.
• Game Content Providers: Game providers whose titles are available on pk198 may receive anonymised session data (game ID, bet amount, outcome) as required for game operation, jackpot processing, and RTP certification. Game providers do not receive your name, contact details, or payment information.
• Regulatory and Law Enforcement Authorities: pk198 may disclose personal data to gaming regulators, financial intelligence units, tax authorities, and law enforcement agencies where required to do so by applicable law, court order, or gaming licence condition.
• Fraud Prevention Databases: Where fraud, money laundering, or other financial crime is detected or reasonably suspected, pk198 may share relevant data with industry fraud prevention databases and affiliated gaming operators to protect the integrity of the gaming ecosystem.
• Professional Advisers: pk198's legal, audit, and compliance advisers may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

All third parties with whom pk198 shares personal data are required to implement appropriate technical and organisational security measures, process data only for the stated purpose, and comply with applicable data protection laws. pk198 does not transfer personal data to countries or territories that do not provide an adequate level of data protection without implementing appropriate safeguards.

pk198 retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply:

When your personal data is no longer required, pk198 will securely delete or anonymise it in accordance with our data destruction procedures. Anonymised data — from which no individual can be identified — falls outside the scope of this Privacy Policy and may be retained for statistical purposes without time limit.

pk198 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and pk198.org is encrypted using 256-bit SSL/TLS. This applies to the pk198 Login page, the cashier, game sessions, and all support communications.
• Encrypted Data Storage: Personal data stored in pk198's databases is encrypted at rest. Passwords are hashed using industry-standard bcrypt hashing and are never stored in readable form. Even pk198 staff cannot see your password.
• Access Controls: Access to personal data within pk198 is restricted on a strict need-to-know basis. Staff access is logged, and all access to sensitive data categories (KYC documents, financial records) requires elevated authorisation and generates an audit trail.
• Device Fingerprinting & Anomaly Detection: pk198's security systems monitor login activity and transaction patterns in real time to detect unusual behaviour, potential credential compromise, and fraudulent activity.
• Regular Security Testing: pk198 conducts periodic penetration testing and vulnerability assessments of its platform infrastructure, conducted by independent cybersecurity specialists.
• PCI-DSS Compliance: Card payment processing is handled exclusively by PCI-DSS Level 1 certified payment partners. pk198 does not store full card numbers on its own systems at any point.

Despite these measures, no internet transmission or electronic storage system is 100% secure. pk198 cannot guarantee absolute security but is committed to applying industry best practices and continuously improving our security posture.

As a pk198 player, you have meaningful rights over your personal data. pk198 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers. The following rights are available to you:

• Right of Access: You have the right to request a copy of the personal data pk198 holds about you, along with information about how it is processed. We will provide this within 30 days of a valid request.
• Right to Rectification: If any personal data pk198 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly through your pk198 account settings.
• Right to Erasure: In certain circumstances, you have the right to request that pk198 delete your personal data. Note that this right does not apply where we are required to retain data by law — for example, KYC and transaction records required under AML regulations must be retained for the periods specified in Section 7 regardless of an erasure request.
• Right to Restriction: You may request that pk198 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, while pk198 verifies it.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on pk198's legitimate interests. pk198 will stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent — primarily direct marketing — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Opt Out of Marketing: You can unsubscribe from all marketing communications at any time by adjusting your notification preferences in your pk198 account settings or by contacting support at [email protected].

To exercise any of the above rights, contact pk198's data protection team at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of the right you wish to exercise. pk198 may request proof of identity before processing your request to prevent unauthorised access to your data.

pk198 is strictly an adult platform. Our services are available only to individuals who are 21 years of age or older. pk198 does not knowingly collect, process, or store personal data from individuals under the age of 21.

Age verification is a mandatory step in the pk198 registration process. All players are required to confirm their date of birth during registration, and this confirmation is subject to KYC documentary verification. Accounts where the registered player is found to be under 21 will be immediately closed, all gameplay voided, and all deposited funds returned to the originating payment method.

pk198 supports Pakistan's framework for protecting minors from exposure to gambling and takes its age verification obligations seriously as a core component of both its licensing conditions and its own ethical standards as an operator.

pk198 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory guidance, or platform features. The "Last Revised" date displayed at the top of this page will always reflect when the most recent changes were made.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — pk198 will notify registered players via a prominent notice on pk198.org and, where practicable, by email to your registered address, at least 14 days before the changes take effect. For non-material changes such as typographical corrections or clarifications that do not alter the substance of our practices, the revised Policy will take effect immediately upon publication.

Your continued use of pk198 after any updated Privacy Policy takes effect constitutes your acknowledgement of the revised Policy. If you do not agree with any material change, you have the right to close your account before the change takes effect and request deletion of your personal data to the extent permitted by our legal retention obligations.

For any questions, concerns, or requests relating to this Privacy Policy or pk198's handling of your personal data, please use one of the following contact channels:

• Data Rights Requests & Privacy Enquiries: Email [email protected] with subject line "Data Protection Enquiry" or "Data Rights Request". All requests are acknowledged within 24 hours and substantively responded to within 30 days.
• Live Chat: Available directly on pk198.org, 24 hours a day, 7 days a week. For data protection matters, ask the agent to escalate your query to the compliance team.
• Language: You may submit your request in English or Urdu — our team will respond in the same language.