Your Privacy Matters: pk 999 does not sell your personal data to third parties for marketing or advertising purposes. This Privacy Policy is written in plain English so every Pakistani player can understand exactly how their information is handled on pk999.plus.
Introduction
This Privacy Policy explains how pk 999, operating the platform at pk999.plus, collects, processes, stores, and protects the personal data of users who register and interact with the pk 999 platform. It applies to all players accessing pk 999 from Pakistan or any other jurisdiction.
By creating an account at pk 999 or by continuing to use pk999.plus after the effective date of this policy, you acknowledge that you have read and understood how we handle your personal information. This policy should be read alongside our Terms and Conditions, which govern the overall agreement between you and pk 999.
Privacy at pk 999 is not an afterthought. We recognise that Pakistani players are sharing sensitive personal and financial information when they register and transact with us, and we take that responsibility seriously. The rules we follow internally on data access, storage, and processing are the same standards applied by reputable financial institutions in Pakistan — because that is the appropriate standard for a platform handling real PKR transactions.
We may update this Privacy Policy from time to time. When material changes are made, we will notify registered players by email and update the "Last Updated" date at the top of this page. Continued use of pk 999 after an update is effective constitutes your acceptance of the revised policy.
Personal Data We Collect
pk 999 collects personal data that is necessary to operate the platform, comply with regulatory and anti-money laundering (AML) requirements, and provide a secure experience for all Pakistani players. We do not collect data beyond what is genuinely required for these purposes.
- Full legal name (as it appears on your CNIC or passport)
- Date of birth
- Email address
- Pakistani mobile number
- Residential address
- Username and encrypted password
- Copy of National Identity Card (CNIC) – front and back
- Passport or driver's licence (where CNIC is unavailable)
- Proof of address (recent utility bill or bank statement)
- Selfie or live photo for facial comparison (where required for enhanced verification)
- Easypaisa, JazzCash, NayaPay, or SadaPay wallet identifiers associated with transactions
- Bank account details (IBAN) for IBFT transfers
- Masked card details (BIN and last 4 digits only – full card numbers are never stored by pk 999)
- Transaction history: deposit amounts, dates, and withdrawal records
- Gaming activity: games played, bets placed, session durations, win/loss history
- Device type, operating system, and browser version
- IP address and approximate geographic location (city level)
- Pages visited on pk999.plus and clickstream data
- Customer support conversation logs
Data Types & Primary Purpose – Quick Reference
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Name, CNIC, date of birth | Account creation, age verification, KYC compliance |
| Contact Data | Email, mobile number, address | Account communication, support, security alerts |
| Financial Data | Wallet IDs, IBAN, transaction history | Payment processing, AML compliance, withdrawal verification |
| Verification Documents | CNIC copy, utility bill | KYC identity verification, fraud prevention |
| Gaming Activity | Bets placed, games played, session data | Responsible gaming monitoring, platform improvement |
| Technical Data | IP address, device, browser | Security, fraud detection, platform optimisation |
How We Collect Your Data
pk 999 collects your personal data through the following channels:
- Direct submission: Information you provide when registering, completing KYC, contacting support, or updating your account profile on pk999.plus.
- Transaction processing: Data that flows through payment processors (Easypaisa, JazzCash, bank systems) when you deposit or withdraw. pk 999 receives only the data necessary to confirm and reconcile transactions.
- Platform usage: Automatically collected technical data including your IP address, device type, session duration, and pages visited when you use pk999.plus, collected via server logs and analytics tools.
- Cookies and similar technologies: Session cookies and persistent cookies used for authentication, preference storage, and platform analytics. Full details are in Section 10 below.
- Third-party verification services: Where identity verification is completed through a third-party KYC provider, that provider shares the verification outcome (pass/fail) and relevant extracted data with pk 999.
pk 999 does not purchase personal data lists from data brokers or third-party marketing companies. Every piece of data we hold about you was collected either directly from you or through a transaction or interaction you initiated with our platform.
How pk 999 Uses Your Personal Data
Your data is used only for the purposes described below. We do not use your personal data for purposes beyond this list without first obtaining your explicit consent or as required by law.
To create and maintain your pk 999 account; authenticate your identity when you log in; and provide access to all platform services including live casino, poker, fishing games, esports betting, and the VIP Club. Without this processing, we cannot provide the pk 999 service to you.
To process your deposits and withdrawals in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard. Financial data is shared with payment processors strictly to the extent necessary to complete individual transactions. We do not retain full card numbers or wallet PINs.
To comply with Know Your Customer (KYC) and anti-money laundering (AML) obligations. This includes verifying your identity, monitoring transaction patterns for unusual activity, and reporting to relevant authorities where legally required. This processing is a legal obligation we cannot waive.
To detect and prevent unauthorised account access, account takeover fraud, payment fraud, bonus abuse, collusion in poker, and any other activity that threatens the integrity of pk 999 or harms other players. Technical data including IP addresses and device fingerprints plays a significant role in this processing.
To monitor gaming activity patterns that may indicate problem gambling behaviour, and to enforce responsible gaming tools you activate (deposit limits, session timers, self-exclusion). pk 999 uses gaming activity data to identify players who may benefit from a responsible gaming check-in from our support team.
To respond to your enquiries, resolve disputes, process complaints, and provide account assistance. Support conversation logs are retained to maintain a coherent service history for your account and to train support staff.
To analyse aggregate, anonymised usage patterns to improve the pk 999 platform — identifying which games are most popular among Pakistani players, which parts of the platform cause friction, and how to optimise the mobile experience for Pakistani network conditions.
To send you information about pk 999 promotions, new games, and relevant platform updates, if you have opted in to marketing communications. You can opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email, or by adjusting your communication preferences in your account settings. Opting out of marketing does not affect transactional emails (password resets, deposit confirmations, withdrawal notifications).
Legal Basis for Processing
pk 999 processes your personal data on the following legal grounds:
- Contractual necessity: Most processing is necessary to fulfil the contract between you and pk 999 — we cannot operate your account or process your transactions without the relevant data.
- Legal obligation: KYC verification, AML monitoring, and transaction reporting are legal obligations that pk 999 must fulfil under applicable financial and gaming regulations. We cannot waive these requirements regardless of player preference.
- Legitimate interests: Security monitoring, fraud prevention, platform analytics, and responsible gaming monitoring are carried out based on pk 999's legitimate business interests, balanced against your data protection interests. We conduct an assessment to ensure this balance is maintained.
- Consent: Marketing communications are sent only on the basis of your explicit consent, given at registration or subsequently via account settings. This consent can be withdrawn at any time.
When and With Whom We Share Your Data
pk 999 does not sell, rent, or trade your personal data. We share your data only in the specific circumstances described below:
We share the minimum necessary financial and identity data with Pakistani payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, partner banks) to process your deposits and withdrawals. These processors have their own data protection obligations and pk 999 selects only processors that meet appropriate security standards.
Where KYC verification is conducted through a third-party identity verification service, your CNIC details and verification documents are shared with that provider for the sole purpose of completing identity checks. The provider is contractually prohibited from using your data for any other purpose.
Third-party live casino studios and game providers may receive limited session and transaction data (player ID, bet amounts, game outcomes) necessary to operate the games and resolve disputes. These providers receive anonymised or pseudonymised player identifiers where possible, not your full personal profile.
pk 999 will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by applicable law, valid legal process, or in connection with an investigation of fraud, money laundering, or other criminal activity. We will not notify you of such disclosures where doing so would compromise an ongoing investigation or would violate applicable law.
In the event of a merger, acquisition, or sale of all or substantially all of pk 999's assets, your personal data may be transferred to the acquiring entity. We will notify registered players of any such change that materially affects how their data is handled, providing an opportunity to close their account if they do not consent to the transfer.
Data Retention
pk 999 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and legitimate business purposes. Our standard retention periods are as follows:
- Account and identity data: Retained for the duration of your account plus a minimum of 5 years after account closure, as required for AML compliance under applicable financial regulations.
- KYC documents: Retained for a minimum of 5 years from the date of verification, in line with AML regulatory requirements.
- Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, for regulatory and audit purposes.
- Gaming activity logs: Retained for 2 years from the date of activity, for responsible gaming monitoring and dispute resolution.
- Customer support logs: Retained for 2 years from the date of the interaction.
- Technical and security logs: Retained for 12 months, then deleted or anonymised.
- Marketing consent records: Retained until consent is withdrawn and for 2 years thereafter as a record of consent status.
When data reaches the end of its retention period, it is securely deleted or permanently anonymised so that it can no longer be linked back to you as an individual. Deletion of KYC data is irreversible — once deleted, re-verification will be required if you reopen your pk 999 account.
How We Protect Your Data
pk 999 implements a layered security architecture to protect your personal and financial data against unauthorised access, disclosure, alteration, and destruction. Security is not a single measure at pk 999 — it is a system of overlapping controls reviewed and updated regularly.
- Encryption in transit: All data transmitted between your browser or app and pk999.plus is encrypted using TLS 1.2 or higher. This ensures your login credentials, financial details, and personal data cannot be intercepted in transit.
- Encryption at rest: Sensitive data including passwords (stored as salted hashes, never in plain text), KYC documents, and financial account identifiers are encrypted at rest using AES-256 encryption in our database systems.
- Access controls: Access to systems containing player personal data is restricted to authorised pk 999 staff on a strict need-to-know basis. All access is authenticated via multi-factor authentication and logged for audit purposes.
- Network security: pk 999's infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability assessments conducted by independent security professionals.
- Staff training: All pk 999 staff who handle personal data receive training on data protection responsibilities and are contractually obligated to maintain confidentiality.
- Incident response: pk 999 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players within 72 hours of becoming aware of the breach, to the extent possible and as required by applicable law.
No online system is completely immune to security risks. pk 999 strongly recommends that all players use a strong, unique password for their pk 999 account, enable two-factor authentication in account settings, and never share their login credentials with anyone.
Your Data Rights as a PK 999 Player
As a registered pk 999 player, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@pk999.plus with the subject line "Data Rights Request" and your registered email address. We will acknowledge your request within 5 business days and respond in full within 30 days.
Right of Access
Request a copy of all personal data pk 999 holds about you. We will provide this in a readable format within 30 days of a verified request.
Right of Rectification
Request correction of inaccurate personal data. Update your basic profile in account settings, or contact support for data that requires staff-level correction such as name changes.
Right to Erasure
Request deletion of your personal data. Note this right is limited — legally mandated data (AML records, transaction logs) must be retained regardless of deletion requests.
Right to Restrict Processing
Request that pk 999 pause processing of your data in specific circumstances — for example, while the accuracy of data is under dispute or while a legitimate interests objection is considered.
Right to Data Portability
Request your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) for transfer to another service, where technically feasible.
Right to Object
Object to processing of your personal data based on legitimate interests, including direct marketing. Objecting to marketing communications results in immediate opt-out from all pk 999 promotional emails.
Cookies & Similar Technologies
pk 999 uses cookies and similar technologies on pk999.plus to make the platform work properly and to improve your experience as a Pakistani player. Here is a clear breakdown of the cookies we use:
These are required for the platform to function. They maintain your login session, remember your account preferences, and ensure your transactions are processed securely. You cannot opt out of essential cookies while using pk 999 — doing so would break core platform functionality including the ability to stay logged in during a gaming session.
These cookies collect anonymised data about how players use pk999.plus — which pages are visited most, how long sessions last, and where players navigate from. This data is aggregated and used to improve the platform. It is never linked back to your individual account profile. You can opt out of analytics cookies via your browser settings or by using a browser with enhanced privacy features.
These remember settings you have chosen on pk 999, such as language preference and display settings. They improve your experience by not requiring you to reset preferences each time you visit. They do not track your gaming activity and contain no financial data.
You can control and delete cookies through your browser settings. Most browsers allow you to block third-party cookies, accept only specific cookies, or clear all cookies on exit. Blocking all cookies will prevent pk 999 from functioning correctly — specifically, it will prevent login sessions from persisting. If you have questions about cookies on pk 999, contact us at support@pk999.plus.
Minors & Age Verification
pk 999 is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18 years of age. Age verification is a mandatory step in the KYC process at pk 999, and accounts where underage use is suspected will be suspended pending verification.
If a parent or guardian becomes aware that their child has provided personal data to pk 999 without appropriate consent, they should contact us immediately at support@pk999.plus. We will take all appropriate steps to close the account and delete the associated data, subject to any applicable legal retention obligations.
pk 999 strongly encourages parents and guardians to use parental control software on shared devices to prevent minors from accessing real-money gaming platforms. If you are concerned about problem gambling in a minor you care for, please visit our Responsible Gaming page for guidance and support resources.
Changes to This Privacy Policy
pk 999 may update this Privacy Policy from time to time as our data practices evolve, as the platform adds new features, or as legal requirements change. When we make material changes — changes that meaningfully affect how we collect, use, or share your personal data — we will notify you by email to your registered address before the changes take effect.
The "Last Updated" date at the top of this page will always reflect the date the current version was published. We encourage you to review this Privacy Policy periodically to stay informed about how pk 999 protects your data.
Minor updates such as clarifications, corrections of typographical errors, or re-organisation of content without substantive changes to data practices will not trigger email notification. The policy on pk999.plus/privacy-policy always reflects the current version in force.
If you continue to use pk 999 after a revised Privacy Policy takes effect, you acknowledge and accept the updated terms of the policy. If you do not accept the changes, you may close your account and request deletion of your data as described in Section 9 above.
Contact Us About Privacy
If you have questions, concerns, or requests relating to this Privacy Policy or to how pk 999 handles your personal data, please contact us through the following channels:
- Email (Privacy Queries): support@pk999.plus — use the subject line "Privacy Query" or "Data Rights Request" for faster routing to the relevant team.
- Live Chat: Available 24/7 on pk999.plus for general privacy questions and to initiate a data rights request verbally with a support agent.
pk 999 will acknowledge all privacy-related emails within 5 business days and provide a full substantive response within 30 days. For complex requests such as full data access or erasure, we may need to verify your identity before processing — this is to protect your data against unauthorised third-party requests.
If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. We will provide contact details for the appropriate authority upon request.