pkace Privacy Policy

1. Data Controller

1.1 The data controller responsible for your personal information processed through the pkace platform is pkace ("we", "us", "our"). pkace operates pkace.one and is responsible for determining the purposes and means of processing your personal data in connection with the pkace platform.

1.2 For all data protection queries, requests, or complaints, you may contact pkace at: [email protected]. Please mark your correspondence clearly as a "Data Protection Request".

2. Personal Data We Collect

2.1 pkace collects personal data in the following categories:

Registration & Identity Data:

• Full legal name as it appears on your CNIC
• Date of birth
• Pakistani mobile number (used as your pkace login identifier)
• Email address (where provided)
• CNIC number and CNIC document images (collected during KYC verification)
• Selfie photograph taken during identity verification

Financial & Transaction Data:

• JazzCash and Easypaisa account identifiers associated with deposits and withdrawals
• HBL, UBL, Meezan Bank, and Bank Alfalah account details where used for transactions
• Deposit amounts, withdrawal amounts, and transaction history
• PKR wallet balance and movement history

Gaming & Betting Activity Data:

• Bets placed, game sessions, win and loss records
• Game preferences and platform usage patterns
• Responsible gaming tool settings (deposit limits, self-exclusion status)

Technical & Device Data:

• IP address and approximate geographic location
• Device type, operating system, and browser type
• Session logs, login timestamps, and access records
• Cookie identifiers (see Section 8)

Communications Data:

• Customer support interactions (chat logs, email correspondence)
• Complaint and dispute records

3. Legal Basis for Processing

3.1 pkace processes your personal data on the following legal bases:

• Contractual necessity: Processing required to register your pkace account, verify your identity, process deposits and withdrawals, and provide gaming services as agreed in the pkace Terms & Conditions.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, responsible gaming obligations, and licensing conditions.
• Legitimate interests: Processing necessary for pkace's legitimate business interests, including fraud prevention, platform security, and improving the pkace user experience, where those interests are not overridden by your rights.
• Consent: Where pkace relies on consent (for example, for certain marketing communications), you may withdraw your consent at any time by contacting support.

4. How pkace Uses Your Data

4.1 pkace uses your personal data for the following purposes:

• Creating and managing your pkace account and login credentials
• Verifying your identity and age (18+) through CNIC-based KYC
• Processing deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah
• Providing and improving the pkace gaming platform, including sports betting, slots, live casino, and crash games
• Detecting, investigating, and preventing fraud, money laundering, and other illegal activity
• Complying with responsible gaming obligations, including monitoring for problem gambling indicators and administering self-exclusion
• Responding to customer support requests and resolving complaints
• Sending transactional communications (account confirmations, security alerts, withdrawal notifications)
• Sending promotional communications where you have consented or where pkace has a legitimate interest in doing so
• Maintaining platform security and preventing unauthorised access to pkace accounts
• Fulfilling pkace's legal and regulatory obligations under applicable gaming and AML regulations

5. Data Sharing & Third Parties

5.1 pkace does not sell your personal data to third parties. pkace may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah, as necessary to process your financial transactions.
• Identity verification providers: Third-party KYC and AML screening providers used to verify your CNIC and comply with licensing requirements.
• Game software providers: JILI, PG Soft, Pragmatic Play, and other certified game studios whose software powers the pkace game library. These providers may process session data in connection with game delivery.
• Regulatory and licensing authorities: pkace's gaming licence authority and relevant regulators, as required by law.
• Law enforcement: Government agencies or law enforcement authorities where pkace is legally required to disclose data in connection with criminal investigations or court orders.
• IT and infrastructure providers: Cloud hosting and technical service providers that support pkace platform operations, under appropriate data processing agreements.

5.2 All third-party processors are required to handle your data in accordance with applicable data protection standards and pkace's contractual instructions.

6. Data Retention

6.1 pkace retains your personal data for as long as your pkace account is active and for a period thereafter as required by applicable legal, regulatory, and licensing obligations. In general:

• Account registration and KYC data: retained for a minimum of 5 years from account closure, as required by AML regulations.
• Financial transaction records: retained for a minimum of 5 years from the date of each transaction.
• Gaming activity records: retained for the duration of the account and for 2 years post-closure.
• Customer support and complaints records: retained for 3 years from closure of the relevant matter.

6.2 Where your data is retained beyond the minimum required period, it will be retained only for as long as necessary for the purpose for which it was collected. Upon expiry of the applicable retention period, data is securely deleted or anonymised.

7. Data Security

7.1 pkace implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL encryption for all data transmitted between your device and pkace servers
• Encrypted storage of sensitive data including CNIC information and payment identifiers
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• OTP two-factor authentication available for all pkace accounts
• Regular security assessments and penetration testing of pkace infrastructure
• Secure session management with automatic timeout for inactive pkace sessions

7.2 In the event of a data breach that is likely to result in risk to your rights and freedoms, pkace will notify you and the relevant supervisory authority in accordance with applicable data protection laws.

8. Cookies & Tracking

8.1 pkace uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help pkace provide a personalised and functional experience.

8.2 pkace uses the following categories of cookies:

• Strictly necessary cookies: Required for pkace to function correctly, including maintaining your login session and remembering security preferences. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and game lobby display options.
• Analytics cookies: Help pkace understand how players use the platform, which pages are visited most, and where improvements can be made. Data is aggregated and anonymised.
• Marketing cookies: Used to display relevant promotions on the pkace platform. These are only set where you have consented.

8.3 You can control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the pkace platform.

9. Your Data Rights

9.1 Subject to applicable data protection laws, you have the following rights in respect of your personal data held by pkace:

• Right of access: You may request a copy of the personal data pkace holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: You may request deletion of your personal data, subject to pkace's legal retention obligations.
• Right to restriction: You may request that pkace restricts processing of your data in certain circumstances.
• Right to portability: Where technically feasible and legally applicable, you may request your data in a portable, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of the above rights, please contact pkace at [email protected] with the subject line "Data Rights Request". pkace will respond within 30 days of receiving your request.

10. Minors & Age Protection

10.1 18+  pkace does not knowingly collect or process personal data from persons under the age of 18. The pkace platform is strictly for adults. CNIC-based KYC verification is used to confirm that all registered players meet the minimum age requirement.

10.2 If pkace becomes aware that a person under the age of 18 has registered a pkace account or provided personal data, pkace will immediately close that account, delete the associated data to the extent permitted by law, and may notify relevant authorities.

10.3 If you believe a minor has accessed pkace using your account or has registered independently, please contact pkace support immediately.

11. International Data Transfers

11.1 pkace is an international platform. Your personal data may be processed in countries outside Pakistan, including in countries where pkace's hosting infrastructure, game providers, or KYC processors are located.

11.2 Where pkace transfers your personal data outside Pakistan, it ensures that appropriate safeguards are in place, including contractual data protection clauses with recipient organisations, to ensure your data receives an equivalent standard of protection to that applicable in Pakistan.

12. Changes to This Privacy Policy

12.1 pkace may update this Privacy Policy from time to time to reflect changes in applicable law, our data practices, or the services we provide. When material changes are made, pkace will notify registered players via email or a prominent notice on the platform prior to the changes taking effect.

12.2 The current version of this Privacy Policy is always available at pkace.one/privacy-policy. The "Last Updated" date at the top of this policy indicates when the most recent revision was made. Continued use of pkace after any update constitutes acceptance of the revised Privacy Policy.

13. Contact & Data Protection Enquiries

13.1 For any queries, requests, or concerns regarding this Privacy Policy or pkace's data practices, please contact our support team:

13.2 If you are not satisfied with pkace's response to your data protection concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.