pak97 Privacy Policy — How We Protect Your Data

Welcome to pak97. This Privacy Policy ("Policy") describes how pak97 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal information submitted by users ("you", "your", "Player") when accessing or using pak97's website, mobile platform, games, sportsbook, and all related services. This Policy forms part of pak97's broader Terms & Conditions and should be read together with them.

Overview

pak97 is an online casino and sports betting platform serving Pakistani players and international users. As an operator in the online gaming industry, we are subject to regulatory obligations that require us to collect and verify specific personal information before allowing players to deposit, play, or withdraw.

This Policy applies to all personal data collected via:

• The pak97 website and any mobile-optimised version thereof.
• Account registration, verification, and login processes.
• Payment and transaction processing for JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and USDT.
• Customer support communications, including live chat, email, and any ticketing system.
• Marketing communications you have opted into.
• Automated technical data collected when you browse or use the Platform.

Data We Collect

pak97 collects personal data in the following categories. We collect only what is genuinely necessary for the purposes described in this Policy — no more.

How Data Is Collected

pak97 collects your personal data through the following methods:

• Direct submission: Information you enter when registering your pak97 account, completing identity verification (KYC), making a deposit or withdrawal, contacting customer support, or completing any other form on the Platform.
• Automated collection: Technical and usage data collected automatically when you visit the pak97 website, including via cookies, server logs, and similar tracking technologies (see Section 09 — Cookies).
• Payment processors: Transactional data received from payment providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard when you initiate or complete a financial transaction on pak97.
• Identity verification partners: Data returned by third-party KYC and identity verification services that pak97 uses to validate the identity and age of players during the account verification process.
• Anti-fraud and AML tools: Data flagged or enriched by automated anti-money laundering screening tools that pak97 is required to operate under its international gaming licence obligations.
• Public sources: In limited circumstances, pak97 may cross-reference publicly available sources to verify the accuracy of information you have provided, particularly where identity verification is inconclusive.

How We Use Your Data

pak97 uses your personal data for the following clearly defined purposes. We do not use your data for any purpose not listed here without first seeking your consent or being required to do so by law:

• Account creation and management: To create, maintain, and administer your pak97 player account, including managing your balance, preferences, and responsible gaming settings.
• Identity and age verification: To confirm that you meet the 21+ age requirement and that your identity matches the payment methods associated with your account — a legal obligation under our gaming licence.
• Payment processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, bank transfers, and card payments securely and accurately.
• Fraud prevention and security: To detect, investigate, and prevent fraud, money laundering, multi-accounting, unauthorised access, and other prohibited activities.
• Regulatory compliance: To fulfil legal, regulatory, and anti-money laundering (AML) obligations applicable to pak97 under its international gaming licence.
• Platform operation and improvement: To deliver, maintain, and improve the pak97 gaming experience — including personalised game recommendations, platform performance analysis, and user experience testing.
• Customer support: To respond to your support queries, resolve disputes, and communicate important account-related information.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to apply responsible gaming interventions where appropriate, including enforcing self-exclusion and deposit limits you have set.
• Marketing (with consent only): To send you promotional communications about pak97 bonuses, PSL cricket betting offers, and new game launches — only where you have explicitly opted in to receive such communications.

Legal Basis for Processing

pak97 processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are:

• Contractual necessity: Processing required to fulfil the contract between you and pak97 — i.e., the Terms & Conditions you accepted when registering your account. This covers account management, payment processing, and core Platform operations.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements — including anti-money laundering (AML) obligations, know-your-customer (KYC) verification mandates, and gaming licence conditions.
• Legitimate interests: Processing carried out for pak97's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and improving the user experience — provided these interests do not override your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional data collection beyond what is strictly required to operate your account. You may withdraw consent at any time without penalty.

Data Sharing & Disclosure

pak97 does not sell, rent, or trade your personal data to any third party. We share your data only in the following specific and necessary circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and USDT processors receive the transactional data required to complete your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification partners receive the identity documents you submit to verify your account. These providers are contractually bound to handle your data securely and only for verification purposes.
• Game content providers: Licensed third-party game studios that supply casino games and sports betting engines to pak97 may receive anonymised session and gameplay data for technical operation of their games.
• Anti-fraud and AML screening services: Automated screening tools used by pak97 to comply with anti-money laundering obligations may process your identity and transaction data.
• Regulatory and law enforcement authorities: pak97 will disclose personal data to competent authorities — including regulators, courts, police, and financial intelligence units — where required to do so by law, court order, or regulatory demand. We will notify you of such disclosures where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of part of pak97's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer.

Data Retention

pak97 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply:

After the applicable retention period expires, pak97 will securely delete or anonymise your personal data in accordance with its internal data destruction procedures. Anonymised data that can no longer be linked to any individual may be retained indefinitely for statistical and analytical purposes.

Data Security

pak97 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and pak97's servers is encrypted using TLS (Transport Layer Security) protocols. Look for the padlock icon and HTTPS in your browser address bar.
• Encryption at rest: Sensitive stored data — including payment details and identity documents — is encrypted at rest using AES-256 or equivalent standard encryption.
• Access controls: Personal data is accessible only to pak97 staff and authorised partners who have a legitimate operational need to access it. Role-based access controls limit data exposure on a strict need-to-know basis.
• Two-factor authentication: pak97's internal systems require multi-factor authentication for administrative access. Players are encouraged to enable 2FA on their own accounts for additional security.
• Regular security audits: pak97 conducts periodic security reviews, penetration testing, and vulnerability assessments to identify and address potential weaknesses in its infrastructure.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, pak97 will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

Cookies & Tracking Technologies

pak97 uses cookies and similar technologies to operate the Platform effectively and to understand how players interact with it. Cookies are small text files placed on your device by the pak97 website. They do not contain executable code and cannot be used to access other files on your device.

The types of cookies pak97 uses are:

• Strictly necessary cookies: Required for the Platform to function. These include session management cookies that keep you logged in during your visit, security tokens, and cookies that maintain your game state. You cannot opt out of strictly necessary cookies while using pak97.
• Performance and analytics cookies: Used to understand how players navigate and use pak97 — for example, which games are most popular in Karachi and Lahore, and which pages have the highest exit rates. This data is used in aggregate form to improve the Platform. You may opt out of these cookies.
• Functional cookies: Remember your preferences — such as your preferred language, display settings, and responsible gaming limits — to provide a more personalised experience across sessions. You may opt out of these cookies, though some features may not work as expected.
• Marketing cookies: Used only if you have consented to receive personalised communications from pak97. These cookies help us measure the effectiveness of our promotional campaigns. You may opt out at any time via your account dashboard or cookie settings.

You can manage or delete cookies at any time via your browser settings. Note that disabling cookies entirely may prevent you from logging in to pak97 or using certain Platform features correctly.

Your Rights

As a pak97 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact pak97 support at the email address provided in Section 15 of this Policy.

• Right of access: You have the right to request a copy of all personal data pak97 holds about you. We will provide this within 30 days of receiving a verified request.
• Right to rectification: If any personal data pak97 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly from your account dashboard.
• Right to erasure ("right to be forgotten"): You may request that pak97 delete your personal data. This right is subject to limitations — we may be required to retain certain data to comply with legal obligations (e.g., AML and KYC retention requirements as outlined in Section 07).
• Right to restrict processing: You may request that pak97 limit the ways in which it processes your data while a dispute regarding its accuracy or the lawfulness of its processing is being resolved.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another service provider where technically feasible.
• Right to object: You may object to pak97 processing your personal data for direct marketing purposes at any time. You may also object to processing based on pak97's legitimate interests, subject to pak97 demonstrating compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where pak97 processes your data based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

Minors & Age Policy

pak97 is an adults-only platform. Access to pak97 and the submission of any personal data to pak97 is strictly prohibited for persons under the age of 21. This age restriction is absolute and applies regardless of local gambling laws in any particular jurisdiction.

pak97 takes the following steps to enforce its 21+ age policy:

• All new accounts are required to declare date of birth at registration.
• Identity verification (KYC) procedures require submission of a government-issued photo ID that confirms age before deposits or withdrawals are permitted.
• Automated age screening tools are applied to all new account registrations as part of pak97's onboarding compliance process.
• Any account suspected of being operated by a person under 21 is suspended pending verification, and all activity is frozen during the investigation.

If pak97 discovers that personal data has been submitted by or on behalf of a person under 21, that data will be deleted without delay and the account will be permanently closed. Any winnings accrued by a confirmed underage account will be forfeited.

International Data Transfers

pak97 operates as an international gaming platform. Your personal data may be processed and stored on servers located outside of Pakistan. Where pak97 transfers personal data to countries that may not have data protection laws equivalent to international best practice, we take the following steps to ensure your data remains protected:

• We use contractual safeguards — including standard contractual clauses — with all third-party processors to whom data is transferred internationally.
• We only transfer data to processors and partners that have demonstrated adequate data protection standards, either through certification or contractual obligation.
• Where technically and operationally feasible, pak97 minimises cross-border data transfers by processing data as close to the point of collection as possible.

By registering a pak97 account, you acknowledge and consent to the transfer of your personal data internationally in accordance with the safeguards described above.

Third-Party Services

pak97's website and Platform may contain references to third-party services — such as payment gateways and game content providers — that operate under their own privacy policies. pak97 is not responsible for the privacy practices of any third-party services accessed via the Platform.

All third-party service providers engaged by pak97 to process personal data on our behalf are:

• Bound by data processing agreements that restrict their use of your data to the specific purpose for which it was shared.
• Required to implement security measures at least equivalent to those maintained by pak97.
• Prohibited from using pak97 player data for their own independent marketing or profiling purposes.
• Subject to regular compliance reviews by pak97 to ensure ongoing adherence to data protection standards.

If you have concerns about how a specific third-party provider — such as JazzCash, EasyPaisa, or a game studio — handles your data in their own capacity, please refer directly to their respective privacy policies.

Changes to This Privacy Policy

pak97 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or business operations. When we make material changes — meaning changes that significantly affect how we collect or use your data — we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered players via email or an in-platform notification at least 7 days before the changes take effect.
• Where required by applicable law, seek fresh consent before applying the changes to your data.

Minor amendments — such as clarifications that do not change the substantive meaning of any clause, or corrections of typographical errors — may be made without prior notice and will be effective immediately upon publication. Your continued use of pak97 after any update to this Policy constitutes your acceptance of the revised Policy. If you do not accept the changes, you must stop using pak97 and may request account closure by contacting support.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how pak97 handles your personal data, please contact our support team — available 24 hours a day, 7 days a week:

Support Email (plain text — not a link):
[email protected]

Support Hours: 24/7 — Live Chat is available directly inside your pak97 account dashboard once logged in.

When contacting us about a data privacy matter, please include your registered email address, a description of your request or concern, and — where relevant — the Section number from this Policy that your query relates to. This helps our team route your request to the correct department without unnecessary delays.