Privacy Policy — pk985

This Privacy Policy ("Policy") describes how pk985 ("pk985", "we", "us", "our") collects, processes, stores, shares and protects the personal data of individuals ("User", "you", "your") who access or use the pk985 platform available at pk985.cam (the "Platform").

pk985 is an English-language online sports betting and casino platform serving users in Pakistan and other permitted jurisdictions. We are committed to handling your personal data responsibly and in accordance with applicable data protection and privacy legislation under the laws of the jurisdiction in which pk985 holds its operating licence.

By registering an Account on the Platform, accessing the Platform as a guest, or otherwise interacting with pk985's services, you acknowledge that you have read, understood and accepted the practices described in this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which contain additional provisions that govern your use of the pk985 Platform.

The following definitions apply throughout this Policy:

• Account: A registered user profile on the pk985 Platform, created upon successful completion of the registration process.
• Personal Data: Any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• Processing: Any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission or deletion.
• Controller: The entity that determines the purposes and means of processing Personal Data — in this context, pk985.
• Processor: A third party that processes Personal Data on behalf of pk985 under documented instructions and contractual obligations.
• Data Subject: The identified or identifiable natural person to whom Personal Data relates — in this context, you, the User.
• KYC: Know Your Customer — the identity and document verification process carried out before processing withdrawals or at pk985's discretion.
• Cookies: Small text files stored on your device by your browser at the instruction of the Platform, used to remember preferences and support analytics.
• Consent: A freely given, specific, informed and unambiguous indication of a Data Subject's agreement to the processing of their Personal Data for a stated purpose.

pk985 collects personal data that is necessary to provide the Platform's services, fulfil regulatory obligations and protect the security of the Platform. We do not collect data beyond what is reasonably required for these purposes. The categories of personal data we collect include:

pk985 collects personal data through the following channels:

Directly From You

• When you complete the registration form and create an Account on the Platform.
• When you submit KYC documentation in response to a verification request.
• When you make deposits or withdrawal requests through the cashier section, including transactions referencing local payment channels familiar to Pakistani users.
• When you contact pk985 support via live chat or email at [email protected].
• When you configure responsible gambling tools such as deposit limits, session reminders or self-exclusion from your Account dashboard.
• When you respond to surveys, promotions or other optional engagement activities on the Platform.

Automatically From Your Device

• Through browser cookies, local storage and similar tracking technologies when you visit pk985.cam.
• Via server logs that record IP address, access times, pages visited and referring URLs with each Platform session.
• Through device fingerprinting and fraud detection systems used to identify and prevent unauthorised access.

From Third-Party Sources

• From payment processors and financial intermediaries who confirm transaction status and, where required, ownership of the payment method used.
• From identity verification and KYC service providers who cross-reference submitted documents against third-party databases.
• From fraud prevention and sanctions screening services used to meet our anti-money-laundering obligations.

pk985 processes your personal data for the following defined purposes. We do not use your data for any purpose incompatible with those listed here without providing prior notice and, where required, obtaining your consent.

• Account Management: Creating, maintaining and securing your pk985 Account, processing login sessions and managing Account settings and communication preferences.
• Service Delivery: Processing bets, settling markets (including cricket, PSL, ICC tournaments, football and UFC events), crediting winnings, and providing access to casino games and slots.
• Financial Processing: Processing deposits and withdrawals, maintaining transaction records, and managing PKR balance display in the cashier section.
• Identity Verification (KYC): Verifying your identity and age to comply with our regulatory obligations and prevent underage gambling access.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, match-fixing, account takeovers and other prohibited conduct described in the Terms & Conditions.
• Responsible Gambling: Monitoring gambling behaviour for signs of problem gambling, administering self-exclusion and limit requests, and communicating responsible gambling information.
• Legal & Regulatory Compliance: Meeting obligations under the licensing conditions applicable to pk985's operating jurisdiction, including record-keeping, reporting and audit requirements.
• Customer Support: Responding to queries, complaints, dispute resolution requests and technical support issues submitted via live chat or email.
• Platform Improvement: Analysing aggregated usage patterns, technical performance metrics and user feedback to improve Platform functionality, navigation and content.
• Marketing Communications: Sending promotional offers, bonus notifications and Platform updates to users who have opted in to marketing communications. You may withdraw consent at any time via your Account settings.

pk985 relies on the following legal bases for processing your personal data under applicable data protection legislation:

• Contractual Necessity: Processing required to perform the contract between you and pk985 — including Account management, service delivery, financial processing and KYC verification — is necessary to fulfil our obligations under the Terms & Conditions you accepted upon registration.
• Legal Obligation: Processing required to comply with applicable laws, licensing conditions, anti-money-laundering regulations and reporting obligations imposed on pk985 by its regulatory and licensing framework.
• Legitimate Interests: Processing carried out for fraud prevention, Platform security, abuse detection and business analytics, where pk985's legitimate interest in protecting the Platform and its users is not overridden by your privacy interests.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided freely given, specific and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Vital Interests: In exceptional circumstances, processing may be necessary to protect the vital interests of a Data Subject, such as in cases involving problem gambling intervention or suspected self-harm disclosures.

pk985 does not sell your personal data to third parties. We share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

Service Providers and Processors

pk985 engages third-party service providers who process personal data on our behalf under binding data processing agreements. These include payment processing intermediaries, KYC and identity verification providers, fraud detection and AML screening services, IT infrastructure and hosting providers, and customer support platform operators. All processors are contractually required to process data only on our documented instructions and to implement appropriate security measures.

Regulatory and Legal Disclosure

pk985 may disclose personal data to licensing authorities, regulators, law enforcement agencies or courts where required by applicable law, regulation, court order or licensing condition. We will notify you of such disclosures where legally permitted to do so.

Corporate Transactions

In the event of a merger, acquisition, restructuring or sale of all or part of pk985's business, personal data held by pk985 may be transferred to a successor entity as part of that transaction. Affected users will be notified of any material change in data controller identity within a reasonable period.

No Sale or Unauthorised Disclosure

pk985 does not share, rent, sell or otherwise disclose your personal data to third-party marketing companies, data brokers or unaffiliated commercial entities for their independent use. References to payment services familiar in Pakistan — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — do not imply any data-sharing arrangement with those institutions.

pk985 retains your personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal, regulatory and licensing obligations. The following general retention periods apply:

Following expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

pk985 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including KYC documents and financial records, using industry-standard encryption protocols.
• Access controls that restrict internal access to personal data to authorised personnel whose roles require such access, on a need-to-know basis.
• Multi-factor authentication requirements for access to internal systems that hold personal data.
• Regular security assessments, penetration testing and vulnerability scanning of Platform infrastructure.
• Incident response procedures designed to detect, investigate and notify affected individuals of personal data breaches within required timeframes.

No internet-based system can be guaranteed to be completely secure. In the unlikely event of a personal data breach affecting your rights and freedoms, pk985 will notify you as required by applicable law and will take immediate remedial action to contain and address the breach.

pk985 operates internationally, and your personal data may be transferred to, stored in and processed in countries outside Pakistan and outside the European Economic Area (EEA). These transfers may include transfers to third-party service providers such as KYC verification platforms, payment processors and hosting infrastructure providers located in various jurisdictions.

Where personal data is transferred internationally, pk985 ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to countries that have been assessed as providing an adequate level of data protection under applicable standards.
• Standard contractual clauses or equivalent contractual protections binding the recipient to data protection obligations consistent with this Policy.
• Binding corporate rules or equivalent intra-group transfer mechanisms where applicable.

You may request further information about the safeguards applicable to any specific international transfer by contacting us at the details set out in Section 15 of this Policy.

The pk985 Platform uses cookies and similar tracking technologies to provide core functionality, improve user experience, support security measures and, where consent has been given, to deliver relevant content. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state, security tokens and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options and responsible gambling tool configurations set in your Account. These improve your experience but are not essential.
• Analytics Cookies: Collect aggregated data about how users navigate the Platform — pages visited, session duration and feature usage — to help us identify areas for improvement. Analytics data is not linked to your personal identity without your consent.
• Marketing Cookies: Used only where you have given explicit consent to receive personalised promotional content. These track interaction with promotional materials to assess campaign effectiveness.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse, delete or receive alerts about cookies. Please note that disabling strictly necessary cookies may prevent you from logging into your Account or using core Platform features. Detailed instructions for managing cookies are available in your browser's help documentation.

Subject to applicable law and the legal basis on which pk985 processes your personal data, you may hold the following rights in relation to your personal data. You can exercise these rights by contacting us at [email protected] with the subject line "Data Rights Request".

pk985 will respond to all valid data rights requests within 30 calendar days. Where the request is complex or voluminous, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it. We may ask you to verify your identity before processing a data rights request.

The pk985 Platform is strictly for adults aged 18 years or older, or the higher minimum age required by the User's jurisdiction. pk985 does not knowingly collect, process or retain personal data from individuals under the applicable minimum age.

As part of our age verification process, pk985 requires all users to confirm their date of birth at registration and to submit proof of age documentation during KYC verification. Any Account found to have been created by a person under the minimum age will be immediately suspended, all associated data will be processed in accordance with our legal obligations, and any deposited funds will be returned at pk985's discretion in line with our Terms & Conditions.

If you are a parent or guardian and believe that a minor has registered an Account on pk985 using false age information, please contact us immediately at [email protected] so that we can take prompt action.

pk985 reserves the right to update this Privacy Policy at any time. Where amendments are material — for example, where we introduce a new category of data processing or change the way we share data with third parties — we will provide advance notice by email to the address registered on your Account, by in-platform notification, or by prominent notice on the pk985 website prior to the changes taking effect.

For minor amendments such as typographical corrections, clarifications or formatting updates, we may update this Policy without prior notification. The "Last updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the Platform following the effective date of any amendment to this Policy constitutes your acknowledgement of and agreement to the updated terms. If you disagree with any amendment, you may exercise your data rights under Section 12 and, if you wish, request Account closure in accordance with our Terms & Conditions.

If you have questions, concerns or complaints about this Privacy Policy or about how pk985 processes your personal data, please contact our support team. All data-related communications should be made in English and directed to:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24/7 via the Platform interface for general enquiries. For formal data rights requests, email is preferred for record-keeping purposes.
• Response Time: pk985 aims to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your complaint to the data protection supervisory authority in pk985's licensing jurisdiction. We will provide the relevant authority's contact details upon request.