pk60 Privacy Policy

1 Introduction

1.1   This Privacy Policy applies to all personal data collected, processed, and stored by pk60 in connection with the operation of the pk60 online casino and sports betting platform accessible at pk60.club (the "Platform").

1.2   pk60 is committed to protecting the privacy of all members and prospective members. This policy sets out, in clear and accessible language, the types of personal information we collect, the reasons we collect it, how it is used and shared, how long it is retained, and the rights available to data subjects with respect to their personal information.

1.3   This Privacy Policy should be read alongside the pk60 Terms and Conditions and the Responsible Gaming Policy, both of which are published on this platform. Together, these documents form the complete framework governing the relationship between pk60 and its members.

1.4   This policy is effective as of 1 January 2026 and supersedes all prior versions. The version number and effective date are displayed in the header of this page. Members will be notified of material changes to this policy prior to such changes taking effect.

2 Data Controller

2.1   For the purposes of applicable data protection legislation, pk60 is the data controller in respect of personal data collected through the Platform. As data controller, pk60 determines the purposes and means by which personal data is processed.

2.2   pk60 operates under an international gaming licence. The platform is administered by the entity holding that licence, details of which are available on request from pk60 support. Enquiries regarding data protection matters may be directed to pk60's designated privacy contact at the email address provided in Section 14 of this policy.

2.3   Where pk60 engages third-party service providers to process personal data on its behalf — for example, payment processors or KYC verification providers — such third parties act as data processors and are bound by contractual obligations consistent with the data protection standards described in this policy.

3 Personal Data We Collect

3.1   pk60 collects the following categories of personal data in the course of platform operation:

3.2   pk60 does not collect or store full payment card numbers. All payment transactions are processed via approved payment gateways that operate under their own security and data protection standards. pk60 retains only the minimum payment reference data required for transaction reconciliation and dispute resolution.

3.3   pk60 does not knowingly collect special category data (such as health data, racial or ethnic origin, or political opinions) except where a member voluntarily discloses such information in the context of a responsible gaming or support interaction. Where such disclosure occurs, the data is treated with heightened confidentiality.

4 How We Collect Your Data

4.1   pk60 collects personal data through the following channels:

• Direct Submission — information you provide when creating your account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey;
• Automated Technologies — technical and usage data collected automatically when you access the platform, including through cookies, server logs, and session tracking tools (see Section 8);
• Third-Party Providers — identity and fraud verification data received from KYC and anti-money laundering (AML) service providers engaged by pk60 to satisfy licensing obligations;
• Payment Processors — transaction confirmation data received from approved payment channels including JazzCash, EasyPaisa, Raast, and affiliated banking partners.

4.2   pk60 does not purchase personal data lists from brokers or other third parties for the purpose of unsolicited marketing outreach.

5 How We Use Your Personal Data

5.1   pk60 processes your personal data for the following purposes:

• Account Management — creating and maintaining your pk60 account, processing login authentication, and enabling access to platform features;
• Identity and Age Verification — confirming that you meet the 21+ age requirement and verifying your identity in compliance with our licensing and KYC obligations;
• Payment Processing — executing deposit and withdrawal transactions, reconciling account balances, and resolving payment disputes;
• Fraud and Security — detecting, investigating, and preventing fraudulent activity, money laundering, collusion, and other prohibited conduct as defined in the pk60 Terms and Conditions;
• Regulatory Compliance — meeting obligations imposed by pk60's international gaming licence, including transaction reporting, AML screening, and responsible gaming monitoring;
• Customer Support — responding to enquiries, resolving complaints, and maintaining records of support interactions for quality assurance;
• Responsible Gaming — monitoring gaming behaviour to identify signs of problem gambling, implementing member-requested restrictions, and administering self-exclusion;
• Platform Improvement — analysing aggregated, anonymised usage data to improve platform performance, game offerings, and user experience;
• Marketing Communications — sending promotional offers and platform updates to members who have opted in to receive such communications (see Section 5.2).

5.2   Marketing Opt-In and Opt-Out. pk60 will only send direct marketing communications to members who have explicitly opted in to receive them during registration or subsequently through their account settings. Members may withdraw their marketing consent at any time by updating their notification preferences in the account dashboard or by contacting pk60 support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

5.3   pk60 does not use automated decision-making processes that produce legal or similarly significant effects on members without human review, except in the context of fraud detection where automated flags are always subject to subsequent human investigation before any account action is taken.

6 Legal Basis for Processing

6.1   pk60 processes personal data on the following legal bases:

• Contractual Necessity — processing required to perform the contract between pk60 and the member, including account management, payment processing, and gaming services;
• Legal Obligation — processing necessary to comply with applicable legal and regulatory requirements, including KYC, AML, and licensing obligations;
• Legitimate Interests — processing carried out in pursuit of pk60's legitimate business interests, including fraud prevention, platform security, and service improvement, provided such interests are not overridden by the member's privacy interests;
• Consent — processing based on the member's freely given, specific, and informed consent, primarily in the context of direct marketing communications.

6.2   Where pk60 relies on legitimate interests as the basis for processing, a balancing assessment has been conducted to ensure that pk60's interests do not outweigh the privacy rights and interests of members. Details of specific legitimate interest assessments are available on request from pk60 support.

7 Data Sharing & Third Parties

7.1   pk60 does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data is shared with third parties only in the following circumstances:

• Service Providers — pk60 engages carefully selected third-party service providers to assist in platform operations, including KYC and identity verification providers, payment gateway operators, fraud detection service providers, cloud hosting and data storage providers, and customer support platform providers. All such providers are bound by data processing agreements that require them to handle personal data solely in accordance with pk60's instructions and to maintain appropriate security standards;
• Regulatory and Legal Authorities — pk60 may disclose personal data to gaming regulators, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where required to do so by law, regulation, court order, or gaming licence condition;
• Business Transfers — in the event that pk60's business or assets are subject to a merger, acquisition, or sale, personal data held by pk60 may form part of the transferred assets. Members will be notified in advance of any such transfer where it affects the terms of this policy;
• Professional Advisers — pk60 may share personal data with legal advisers, auditors, or compliance consultants on a need-to-know basis and subject to strict confidentiality obligations.

7.2   Where personal data is transferred to service providers or other parties located outside Pakistan, pk60 ensures that appropriate safeguards are in place to protect the data, including standard contractual clauses or equivalent data transfer mechanisms recognised under applicable data protection law.

8 Cookies & Tracking Technologies

8.1   pk60 uses cookies and similar tracking technologies on the Platform to enhance functionality, maintain session continuity, and collect aggregated analytical data. The categories of cookies used are as follows:

• Strictly Necessary Cookies — essential for the platform to function correctly. These include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without impairing platform functionality;
• Functional Cookies — used to remember your preferences, such as language settings, preferred payment method display, and responsible gaming tool configurations;
• Analytical Cookies — used to collect anonymised information about how members use the platform, including pages visited, session duration, and feature interaction, to help pk60 improve the platform experience;
• Security Cookies — used to support fraud detection and to identify unusual or potentially malicious access patterns.

8.2   pk60 does not use third-party advertising or retargeting cookies that track your activity across external websites. All tracking technologies deployed on the Platform operate solely within the pk60 domain.

8.3   You may manage your cookie preferences through your browser settings. Please note that disabling functional or analytical cookies may affect certain aspects of your platform experience. Strictly necessary cookies cannot be disabled through browser settings.

9 Data Retention

9.1   pk60 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data — retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in compliance with AML and licensing record-keeping requirements;
• Financial and Transaction Data — retained for a minimum of five (5) years from the date of the relevant transaction, or longer where required by applicable financial regulation;
• Gaming and Betting Data — retained for a minimum of three (3) years from the date of the relevant session or wager;
• Support and Communications Data — retained for three (3) years from the date of the interaction;
• Responsible Gaming Data — self-exclusion records and related responsible gaming data are retained for a minimum of five (5) years following the expiry of the exclusion period, to enable pk60 to honour reinstatement restrictions and comply with licensing obligations.

9.2   Where personal data is no longer required for any of the above purposes, pk60 will securely delete or anonymise it in accordance with our internal data destruction procedures. Anonymised data that cannot be re-linked to any individual may be retained indefinitely for aggregate analytical purposes.

10 Data Security

10.1   pk60 employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmission between your device and pk60 servers;
• One-way cryptographic hashing for the storage of member passwords;
• Access controls and role-based permissions limiting internal access to personal data to authorised personnel with a demonstrable need;
• Regular independent security audits and penetration testing of platform infrastructure;
• Intrusion detection systems and real-time monitoring for anomalous access patterns;
• Secure data centre infrastructure with physical access controls and environmental protections.

10.2   Notwithstanding the above measures, no data transmission over the internet or data storage system can be guaranteed to be completely secure. Members are encouraged to take their own precautions, including using a strong unique password, enabling any available two-factor authentication, and logging out of the platform when accessing from shared or public devices.

10.3   In the event of a personal data breach that poses a risk to the rights and freedoms of members, pk60 will notify affected members and relevant regulatory authorities in accordance with applicable data breach notification obligations and without undue delay.

11 Your Data Rights

11.1   Subject to applicable law, pk60 members hold the following rights with respect to their personal data:

• Right of Access — you have the right to request a copy of the personal data pk60 holds about you. pk60 will respond to access requests within thirty (30) days of receipt;
• Right to Rectification — you have the right to request correction of inaccurate or incomplete personal data. Many data fields can be updated directly from your account dashboard. Where updates require pk60 intervention, requests will be actioned within fourteen (14) days;
• Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. Note that pk60 may be required to retain certain data by law or licensing obligation notwithstanding an erasure request;
• Right to Restrict Processing — you may request that pk60 restrict processing of your data in certain circumstances, for example while the accuracy of the data is being contested;
• Right to Data Portability — where processing is based on consent or contractual necessity and carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format;
• Right to Object — you have the right to object to processing based on legitimate interests, including profiling, and to opt out of direct marketing at any time;
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11.2   To exercise any of the above rights, please contact pk60 support using the details provided in Section 14. pk60 may need to verify your identity before processing a data rights request. Where a request is manifestly unfounded or excessive, pk60 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation provided to the member.

12 Children and Minors

12.1   The pk60 platform is strictly intended for adults. Access is prohibited to persons under 21 years of age. pk60 does not knowingly collect or process personal data relating to individuals below the age of 21.

12.2   Where pk60 discovers or is notified that personal data has been collected from a person under the age of 21, such data will be deleted from pk60's systems without delay, the associated account will be closed, and any balance will be handled in accordance with the pk60 Terms and Conditions and applicable regulatory guidance.

12.3   Parents or guardians who believe a person under their care has registered with pk60 are encouraged to contact pk60 support immediately at [email protected] so that appropriate action can be taken without delay.

13 Changes to This Privacy Policy

13.1   pk60 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The current version number and effective date are displayed prominently at the top of this page.

13.2   Where a change to this policy materially affects how pk60 processes your personal data or reduces your privacy rights, pk60 will notify you in advance via your registered email address or through a platform notification. Such material changes will not take effect until at least seven (7) calendar days after notification.

13.3   Minor updates — such as typographical corrections, clarifications of existing practices, or updates to contact details — may take effect immediately upon publication. pk60 encourages members to review this policy periodically to stay informed of how their personal data is handled.

13.4   Continued use of the pk60 platform following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised policy, you must cease using the platform and contact pk60 support to request account closure and, where applicable, data erasure.

14 Contact Us

14.1   For any enquiries relating to this Privacy Policy, to exercise your data rights, or to raise a data protection concern, please contact pk60 using the following details:

Privacy and Data Protection Enquiries:

Email (plain text — not a clickable link):   [email protected]
Subject line:   Privacy Enquiry — [your registered email address]

14.2   pk60 support is available 24 hours a day, 7 days a week. Privacy-related enquiries are handled by a dedicated compliance team and typically receive a response within two (2) business days. Complex data access or erasure requests may require up to thirty (30) days to fulfil.

14.3   Where a member is not satisfied with pk60's response to a privacy-related complaint, they may escalate the matter to the data protection supervisory authority or gaming regulatory body applicable to their jurisdiction. pk60 will cooperate fully with any such authority in the investigation of a complaint.