pkace Privacy Policy

1. Controller Identity

pkace is the data controller responsible for the personal data collected through the pkace.asia platform. pkace determines the purposes for which personal data is processed and the means by which such processing is carried out. Where pkace engages third-party processors — such as payment providers or KYC verification services — those processors act on pkace's documented instructions and are bound by data processing agreements consistent with applicable data protection standards.

For all data-related enquiries, including requests to exercise data subject rights, contact the pkace data team at: [email protected] with the subject line "Data Privacy Request".

2. Data We Collect

pkace collects personal data that is necessary to provide, operate, and secure the pkace platform. The categories of personal data we process include:

Category	Examples	Required?
Identity Data	Full name, date of birth, CNIC number, CNIC scan/image, selfie photograph	Mandatory for KYC
Contact Data	Email address, Pakistani mobile number, city of residence	Mandatory
Account Data	Username, encrypted password, account preferences, 2FA configuration	Mandatory
Financial Data	JazzCash / Easypaisa mobile number, bank account details, transaction history, PKR balance	Mandatory for deposits/withdrawals
Gaming Data	Bets placed, games played, session durations, win/loss history, bonus usage	Automatically collected
Technical Data	IP address, device type, browser version, operating system, login timestamps	Automatically collected
Communications Data	Support chat transcripts, email correspondence with pkace	When support is used

pkace does not collect sensitive data categories such as racial or ethnic origin, political opinions, or health data unless specifically required for responsible gaming assessments, in which case such data is handled with enhanced protections.

3. How We Collect Data

pkace collects personal data through the following means:

• Direct submission — data you provide when registering a pkace account, completing KYC verification, making a deposit or withdrawal, or contacting pkace support;
• Automated collection — technical and gaming data collected automatically as you interact with the pkace platform through server logs, session tracking, and platform analytics tools;
• Third-party sources — identity verification data returned by KYC service providers following document checks; fraud-risk signals from payment processors; and age verification data from verification bureaus where applicable.

4. Purposes & Legal Basis for Processing

pkace processes your personal data on one or more of the following legal bases:

• Contract performance — processing necessary to create and maintain your pkace account, process deposits and withdrawals, settle bets, and deliver gaming services;
• Legal obligation — processing required to comply with anti-money laundering (AML) obligations, age verification requirements, KYC obligations, and any reporting duties under applicable law;
• Legitimate interests — fraud detection and prevention, platform security monitoring, responsible gaming monitoring, and improving pkace services;
• Consent — marketing communications, where you have explicitly opted in to receive promotional messages from pkace.

pkace does not make fully automated decisions that produce legal or similarly significant effects on users without human review. Responsible gaming interventions (such as flagging accounts for review) involve human assessment before any action is taken.

5. Data Sharing

pkace does not sell your personal data to third parties under any circumstances. We may share your data with the following categories of recipients where necessary:

• Payment processors — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers receive the minimum data necessary to process your requested transactions;
• KYC and identity verification providers — receive identity documents and associated data to verify your identity and age in accordance with our obligations;
• Fraud prevention services — receive technical data (IP address, device fingerprint) to assess account risk and prevent fraudulent activity;
• Regulatory authorities — where pkace is required by law, court order, or regulatory directive to disclose user data, we will comply with such requirements and, where permitted, notify the affected user;
• IT and platform service providers — cloud infrastructure, data hosting, and platform analytics providers who process data on pkace's behalf under binding data processing agreements.

All third-party processors are subject to contractual data protection obligations. pkace remains responsible for ensuring that processors maintain adequate standards.

6. International Data Transfers

The pkace platform serves users in Pakistan and may involve the transfer of personal data to systems located in other jurisdictions. Where personal data is transferred internationally, pkace applies appropriate safeguards, including standard contractual clauses or equivalent mechanisms, to ensure that your data receives a level of protection consistent with applicable data protection standards. You may request information about the specific safeguards applied to your data by contacting pkace support.

7. Data Retention

pkace retains personal data for no longer than is necessary for the purposes for which it was collected, subject to legal retention obligations. Specific retention periods include:

• Identity and KYC documents — retained for a minimum of 5 years following account closure, in compliance with AML record-keeping requirements;
• Financial transaction records — retained for a minimum of 5 years from the date of the transaction;
• Gaming history — retained for the duration of the account and for a minimum of 2 years following account closure;
• Support communications — retained for 3 years from the date of the interaction;
• Marketing consent records — retained for the duration of the consent and for 2 years following withdrawal of consent.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8. Cookies & Tracking Technologies

pkace uses cookies and similar tracking technologies on the pkace.asia platform for the following purposes:

• Essential cookies — required for core platform functionality, including session management and secure login. These cannot be disabled without impairing platform use;
• Analytics cookies — used to understand how users navigate the pkace platform, which pages are most visited, and how performance can be improved. Data collected is aggregated and does not identify individual users;
• Preference cookies — store user preferences such as language selection and display settings to improve your experience on return visits.

pkace does not use third-party advertising cookies or behavioural targeting cookies that track your activity across other websites. You may manage cookie preferences through your browser settings, though disabling essential cookies may affect platform functionality.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data pkace holds about you:

• Right of access — the right to obtain confirmation that pkace processes your data and to receive a copy of that data;
• Right to rectification — the right to have inaccurate personal data corrected without undue delay;
• Right to erasure — the right to request deletion of your personal data, subject to legal retention obligations that may require pkace to retain certain data;
• Right to restriction — the right to request that pkace restricts processing of your data in specified circumstances;
• Right to data portability — the right to receive personal data you have provided to pkace in a structured, machine-readable format;
• Right to object — the right to object to processing carried out on the basis of legitimate interests, including profiling;
• Right to withdraw consent — where processing is based on your consent (e.g., marketing), the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, submit a request to pkace support at [email protected] with the subject line "Data Subject Request". pkace will respond within 30 calendar days. Identity verification may be required before the request is processed.

10. Children's Privacy

The pkace platform is strictly restricted to users aged 18 and above. pkace does not knowingly collect personal data from individuals under 18. If pkace becomes aware that personal data has been collected from an underage user, that data will be deleted and the associated account will be closed. Parents or guardians who become aware that a minor has registered on pkace should contact support immediately at [email protected] so the matter can be addressed promptly.

11. Security Measures

pkace implements technical and organisational security measures proportionate to the risks associated with the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pkace servers;
• Encrypted storage for passwords — pkace never stores plaintext passwords;
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of platform infrastructure;
• Two-factor authentication available for all user accounts;
• Monitoring for anomalous login activity and automated alerts for suspicious account behaviour.

No system is entirely immune to security threats. In the event of a data breach that is likely to result in a risk to your rights, pkace will notify affected users without undue delay and take immediate remedial action.

12. Marketing Communications

pkace may send you promotional communications about bonuses, new games, PSL betting markets, and platform updates where you have provided explicit consent to receive such communications. You may withdraw your marketing consent at any time by contacting pkace support or by using the unsubscribe mechanism in any marketing email. Withdrawal of marketing consent does not affect your ability to use the pkace platform or your account status.

pkace does not engage in unsolicited marketing to Pakistani mobile numbers via SMS without prior consent. pkace will never ask for your password, CNIC, or financial details via any marketing communication.

13. Third-Party Links

The pkace platform does not contain links to third-party websites as a matter of policy. Should any reference to an external resource appear, pkace is not responsible for the privacy practices of any third-party website or service. This Policy applies exclusively to the pkace.asia platform and any subdomains operated by pkace.

14. Policy Amendments

pkace may update this Privacy Policy periodically to reflect changes in our data processing practices, legal obligations, or platform features. Material changes will be communicated to registered users via the email address on their pkace account. The effective date at the top of this document will be updated upon each revision. Continued use of the pkace platform following notification of changes constitutes your acknowledgement of the updated Policy.

15. Contact & Complaints

For all privacy-related queries, data subject requests, or concerns regarding pkace's handling of your personal data, contact the pkace data team: [email protected] — subject line "Data Privacy Request". pkace will acknowledge all privacy queries within 3 business days and aim to resolve them within 30 calendar days.

If you believe pkace has not handled your personal data in accordance with applicable law and your concern has not been satisfactorily resolved through pkace's internal process, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.