Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how pk556 ("pk556", "we", "us", "our"), the operator of the website accessible at https://pk556.cam (the "Platform"), collects, uses, stores, shares and protects personal data relating to users of the Platform ("you", "your", "User").

pk556 is committed to handling personal data responsibly and in accordance with applicable data protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality. While Pakistan does not currently have a fully enacted comprehensive data protection law on the scale of the EU's General Data Protection Regulation (GDPR), pk556 applies internationally recognised data protection standards as a baseline for all users, including those accessing the Platform from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and other cities across Pakistan.

This Policy should be read alongside the Terms & Conditions and the Responsible Gambling policy, both of which are incorporated by reference.

2 Definitions

For the purposes of this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, phone number, national identity number, financial account details, IP address and device identifiers.
• "Processing" means any operation performed on Personal Data, whether or not by automated means, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Subject" means the individual to whom Personal Data relates — in this context, you as the registered or prospective User of the Platform.
• "Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, pk556.
• "Processor" means any third party that processes Personal Data on behalf of pk556 under a contractual arrangement.
• "KYC Data" means identity and age-verification documents submitted as part of the Know Your Customer verification process, including CNIC, passport, proof of address and liveness check data.
• "Cookies" means small data files placed on your device by the Platform for session management, analytics and functionality purposes.

3 Data Controller

pk556 acts as the Data Controller in respect of Personal Data collected through the Platform. As Controller, pk556 determines the purposes for which and the manner in which your Personal Data is processed. Any questions regarding data control responsibilities or this Policy should be directed to the contact details provided in Section 16.

Where pk556 engages third-party service providers (for example, payment processors, KYC verification providers or analytics platforms), those providers may act as independent Controllers or as Processors on behalf of pk556, depending on the nature of the data relationship. pk556 maintains contractual data processing agreements with all material third-party Processors.

4 Personal Data We Collect

pk556 collects the following categories of Personal Data, depending on how you interact with the Platform:

5 How We Collect Personal Data

pk556 collects Personal Data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support or opt in to marketing communications;
• Automatically — through cookies, log files, pixel tags and similar technologies when you browse or interact with the Platform;
• From third parties — from KYC verification service providers, fraud-detection services, payment processors and, where applicable, public databases used for AML screening.

6 Data Processing & Use

pk556 processes Personal Data for the following purposes:

• Account management: Creating, maintaining and operating your registered account on the Platform;
• Identity verification (KYC): Verifying your age, identity and eligibility to use the Platform in compliance with applicable operator obligations;
• Transaction processing: Facilitating deposits and withdrawals via supported payment methods and reconciling financial records;
• Fraud prevention and AML: Detecting, investigating and preventing fraudulent activity, collusion, money laundering and other prohibited conduct;
• Responsible gambling: Monitoring gaming activity to identify indicators of problem gambling behaviour and applying or enforcing responsible gambling tools;
• Customer support: Responding to enquiries, complaints and technical issues submitted via email or live chat;
• Platform improvement: Analysing usage patterns to improve the functionality, design and performance of the Platform;
• Marketing communications: Sending promotional offers, bonus notifications and platform updates where you have provided consent or where a legitimate interest applies;
• Legal and regulatory compliance: Meeting obligations under applicable laws and fulfilling requests from competent authorities where legally required.

7 Legal Basis for Processing

Where internationally recognised data protection standards apply, pk556 processes Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract with you (account operation, transaction processing, KYC);
• Legal obligation: Processing required to comply with applicable laws, including AML, age verification and fraud-prevention obligations;
• Legitimate interests: Processing for fraud detection, platform security, analytics and internal business operations where your interests do not override those of pk556;
• Consent: Processing for marketing communications and non-essential cookies, where explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

8 Data Sharing & Disclosure

pk556 does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. Personal Data may be shared in the following limited circumstances:

• Service providers and processors: KYC verification providers, payment processors (which may include third-party payment intermediaries familiar to Pakistani users), IT infrastructure providers, fraud-detection services and analytics platforms engaged by pk556 under contractual data processing agreements;
• Group companies: Where pk556 operates within a corporate group structure, Personal Data may be shared with affiliated entities for internal operational purposes, subject to equivalent data protection standards;
• Legal and regulatory disclosure: Where pk556 is required by law, court order or competent regulatory authority to disclose Personal Data, pk556 will comply to the extent required and will notify affected Users where legally permitted to do so;
• Business transfers: In the event of a merger, acquisition, restructuring or sale of assets, Personal Data may be transferred to the successor entity, subject to equivalent privacy protections;
• Fraud prevention networks: Where permitted by applicable law, data may be shared with industry fraud-prevention databases to detect and prevent abuse.

References to payment providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are for context only. Any data shared with payment providers is limited to what is strictly necessary to process the specific transaction and is governed by those providers' own privacy policies. No endorsement of pk556 by any payment provider is implied.

9 Your Rights as a Data Subject

Subject to applicable law and certain limitations, you hold the following rights in relation to your Personal Data held by pk556:

To exercise any of the above rights, please contact pk556 using the details in Section 16. We will respond to all valid requests within 30 calendar days. pk556 may need to verify your identity before processing a rights request to prevent unauthorised disclosure. In some cases, legal or regulatory obligations may limit pk556's ability to fulfil a particular request — we will explain this clearly if it applies.

10 Data Retention

pk556 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting or reporting obligations. The following general retention principles apply:

• Active account data: Retained for the duration of the account relationship plus a reasonable period thereafter;
• KYC and identity documents: Retained for the period required by applicable AML and record-keeping obligations, typically a minimum of five years from the date of collection or last transaction;
• Transaction records: Retained for a minimum of five years in accordance with standard financial record-keeping requirements;
• Marketing consent records: Retained for the duration of your account plus a reasonable period to demonstrate compliance;
• Support communications: Retained for up to three years from the date of the last communication unless a longer period is required for dispute resolution or legal purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

11 Data Security

pk556 implements appropriate technical and organisational security measures to protect Personal Data against accidental loss, destruction, alteration, unauthorised disclosure or access. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including passwords (stored in hashed form) and financial data;
• Role-based access controls limiting internal access to Personal Data to authorised personnel only;
• Regular security assessments and vulnerability testing of Platform infrastructure;
• Secure HTTPS-only verification portals for KYC document submission.

Despite these measures, no method of transmission over the internet or electronic storage is entirely secure. Users are reminded never to share their account credentials, to use strong unique passwords and to enable two-factor authentication where available. If you suspect unauthorised access to your account, contact [email protected] immediately.

12 Cookies & Tracking Technologies

The Platform uses cookies and similar tracking technologies to operate correctly, improve performance and provide a personalised experience. The table below summarises the main categories of cookies used:

Strictly necessary cookies cannot be disabled as they are essential for Platform operation. You may manage functional, analytics and marketing cookies through your browser settings or via the cookie preference centre on the Platform where provided. Note that disabling certain cookies may affect Platform functionality.

13 International Data Transfers

pk556 may transfer Personal Data to countries outside Pakistan in connection with the services provided by third-party processors (for example, cloud hosting providers, KYC verification platforms and payment processors whose infrastructure may be located in various jurisdictions). Where such transfers occur, pk556 takes reasonable steps to ensure that appropriate safeguards are in place to protect your Personal Data to a standard consistent with this Policy.

Users acknowledge that by using the Platform, their Personal Data may be processed in jurisdictions that may not offer the same level of data protection as their home jurisdiction.

14 Minors and Age Restriction

The Platform is strictly for individuals aged 18 years or above, or the higher minimum age required by the operator's licence jurisdiction. pk556 does not knowingly collect Personal Data from individuals under the applicable minimum age. If pk556 becomes aware that Personal Data has been collected from a minor, that data will be deleted as promptly as possible and the associated account will be closed.

If you believe that a minor has registered on the Platform, please notify us immediately at [email protected] (plain text — not a clickable link). Being of minimum age does not make gambling lawful in Pakistan; users remain responsible for complying with all applicable local laws.

15 Amendments to This Policy

pk556 reserves the right to amend this Privacy Policy at any time to reflect changes in legal requirements, Platform functionality or our data processing practices. Material changes will be communicated via a prominent notice on the Platform or by email to your registered address where practicable. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically.

16 Contact Us

For any questions, concerns or requests relating to this Privacy Policy or to the processing of your Personal Data, please contact the pk556 data team. Our team handles enquiries in English and Urdu.

Support email (plain text — not a clickable link): [email protected]

Copy this address manually into your email client. Email is intentionally displayed as plain text and is not a clickable link. We aim to acknowledge all data-rights requests within 5 business days and provide a full response within 30 calendar days.