Privacy Policy

01 Introduction

pk997 ("we", "us", "our" or "the Platform") is committed to protecting the privacy and personal data of every individual who accesses or uses the pk997 website at https://pk997.cam. This Privacy Policy ("Policy") sets out in detail how we collect, use, store, share and protect personal data in connection with the operation of the Platform.

This Policy applies to all users of the pk997 Platform, including visitors who browse without registering an account and registered users who access the full range of Platform features. It should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and pk997.

02 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably identify a living individual, either directly (e.g., name, email address) or indirectly (e.g., device ID, IP address, account username).
• "Data Controller" means pk997, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of pk997 in accordance with documented instructions and data processing agreements.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, transfer, restriction or deletion.
• "User" means any natural person who accesses the Platform, whether registered or unregistered.
• "Account" means a registered user profile on the Platform, created through the registration process.
• "Cookies" means small text files placed on your device by the Platform to facilitate session management, preferences and analytics.
• "KYC" means Know Your Customer — the identity verification process conducted in compliance with anti-money-laundering (AML) obligations.

03 Personal Data We Collect

pk997 collects personal data in the following categories, depending on how you interact with the Platform:

3.1 Data Provided Directly by You

3.2 Data Collected Automatically

When you visit the Platform, certain technical data is collected automatically:

• Device & Technical Data: IP address, browser type and version, operating system, screen resolution, device type (desktop, mobile, tablet).
• Usage Data: Pages visited, time spent on each page, navigation path, referral source, search queries within the Platform.
• Session Data: Login timestamps, session duration, feature interactions, game guide pages accessed.
• Cookie Data: Cookie identifiers and associated preference or session data as described in Section 8 of this Policy.

04 Legal Basis for Data Processing

pk997 processes personal data only where a valid legal basis exists. The following bases apply to our processing activities:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account management, transaction processing and customer support.
• Legal Obligation: Processing required to comply with applicable legal requirements, including anti-money-laundering (AML) obligations, identity verification (KYC) and fraud prevention regulations.
• Legitimate Interests: Processing for purposes such as platform security, fraud detection, service improvement and internal analytics, where these interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent — such as for non-essential cookies or optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

05 How We Use Your Personal Data

pk997 uses collected personal data for the following purposes:

5.1 Platform Operations

• Creating and managing your Account, including authentication and access control.
• Processing deposit and withdrawal transactions in PKR and other supported currencies.
• Communicating with you regarding account status, security alerts and support requests.
• Delivering personalised content recommendations based on your usage patterns and preferences.

5.2 Compliance & Security

• Conducting identity and age verification in accordance with KYC and AML requirements.
• Detecting, investigating and preventing fraudulent activity, account abuse and prohibited conduct.
• Complying with lawful requests from regulatory authorities or law enforcement bodies.
• Maintaining audit logs and transaction records as required by applicable legal retention obligations.

5.3 Platform Improvement

• Analysing aggregated, anonymised usage data to improve Platform performance, content quality and user experience.
• Conducting A/B testing and feature development based on anonymised behavioural data.
• Monitoring platform security and infrastructure performance through technical log analysis.

06 Data Sharing & Disclosure

pk997 does not sell, rent or commercially trade your personal data. We share personal data only in the following limited circumstances:

6.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers who process data on our behalf under written data processing agreements. These providers assist with functions including cloud hosting, database management, security monitoring and analytics. They are contractually restricted to processing your data only as instructed by pk997 and for no other purpose.

6.2 Legal & Regulatory Disclosure

We may disclose personal data to competent authorities — including Pakistani law enforcement, the Federal Investigation Agency (FIA), the Financial Monitoring Unit (FMU) or other regulatory bodies — where we are legally required to do so, or where disclosure is necessary to protect the rights, property or safety of pk997, its users or the public.

6.3 Business Transfers

In the event that pk997 undergoes a merger, acquisition, asset sale or corporate restructuring, personal data held by us may be transferred as part of that transaction. We will provide notice through the Platform if such a transfer affects your data, and the transferee will be required to honour this Policy.

07 Payment Data & Financial Information

Financial data — including payment method details, PKR transaction amounts and transaction reference numbers — is processed with heightened security controls. pk997 does not store full card numbers or complete mobile wallet credentials on its servers. Where payment processing involves third-party payment infrastructure (such as bank transfer references or mobile wallet transaction IDs), the relevant provider's privacy policy and data practices govern the handling of that transaction data.

Transaction records are retained for the minimum period required by applicable financial regulations and AML obligations. Access to financial data within pk997 systems is restricted to authorised personnel on a strict need-to-know basis.

Users who complete KYC verification may be required to submit documentary evidence of identity and proof of payment method ownership (e.g., a screenshot of an Easypaisa account held in the registered user's name, or a bank statement from HBL, UBL, Meezan Bank or Bank Alfalah confirming the account holder's name). These documents are processed solely for verification purposes and retained in accordance with the schedules set out in Section 9.

08 Cookies & Tracking Technologies

pk997 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection tokens and load-balancing cookies. They cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data on how users navigate the Platform — pages visited, session duration, referral sources. This data informs content improvements and technical performance optimisation.
• Preference Cookies: Store user interface preferences such as display settings, preferred language confirmation (English) and notification choices.
• Security Cookies: Assist with fraud detection, account abuse prevention and session integrity monitoring.

8.1 Managing Cookies

You may manage or disable non-essential cookies through your browser's privacy settings. The procedure varies by browser (Chrome, Firefox, Safari, Edge) but is typically found under Settings → Privacy → Cookies. Disabling performance or preference cookies will not prevent you from using the Platform but may affect your experience.

Note that strictly necessary cookies cannot be disabled through browser settings without breaking core Platform functionality, including account login and session management.

09 Data Retention

pk997 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention schedules apply:

Upon expiry of the applicable retention period, data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

10 Data Security Measures

pk997 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• Transport Layer Security (TLS): All data transmitted between users and the Platform is encrypted in transit using TLS 1.2 or higher.
• Encryption at Rest: Sensitive data stored on Platform servers — including password hashes and KYC document stores — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Internal access to personal data is restricted by role-based access control (RBAC). Only authorised personnel with a documented operational need may access personal data systems.
• Security Monitoring: The Platform employs continuous security monitoring, intrusion detection and log analysis to identify and respond to potential security incidents promptly.
• Incident Response: In the event of a personal data breach affecting user data, pk997 will notify affected users within a reasonable timeframe and take immediate remedial action.

11 Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by pk997. To exercise any of these rights, please contact us at the details provided in Section 15.

We aim to respond to all data rights requests within 30 calendar days of receipt. Complex or multiple concurrent requests may require up to 60 days, in which case we will notify you of the extension within the initial 30-day period.

12 Minors & Age-Restricted Access

The pk997 Platform is strictly for use by adults aged 18 years or older — or the minimum age required by the applicable operator or license jurisdiction, whichever is higher. We do not knowingly collect personal data from individuals below this age threshold.

If we become aware that personal data has been collected from a minor without verifiable parental or guardian consent, we will take prompt action to delete that data and close any associated account. If you believe a minor has submitted personal data through the Platform, please contact us immediately using the details in Section 15.

13 International Data Transfers

pk997 may use cloud hosting, database infrastructure or service providers whose servers are located outside Pakistan. Where personal data is transferred to servers or processors in other countries, we implement appropriate safeguards to ensure that the data continues to receive an equivalent level of protection, including:

• Contractual data processing agreements with all third-party processors that impose binding obligations equivalent to the protections described in this Policy.
• Transfer mechanisms such as standard contractual clauses or equivalent instruments recognised under applicable law.
• Technical security measures (encryption, access controls) that apply regardless of the geographic location of the processing infrastructure.

By using the pk997 Platform, you acknowledge that your personal data may be processed outside Pakistan. If you have questions about specific transfer destinations or safeguards, please contact us.

14 Policy Amendments

pk997 reserves the right to update, revise or replace this Privacy Policy at any time. Any material changes — for example, changes to the categories of data we collect, the purposes for which we use it or the third parties with whom we share it — will be communicated to registered users by:

• Posting the revised Policy on this page with an updated "Last Updated" date.
• Displaying a prominent notice on the Platform at or after the time of publication.
• In the case of significant changes, sending a notification email to registered users at the email address on file.

Continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the amended terms. If you do not agree with a material amendment, you may request Account closure in accordance with our Terms & Conditions.

15 Contact Us

If you wish to exercise any of your data rights, submit a privacy complaint or ask questions about this Policy, please contact the pk997 data team through the following channel. All privacy enquiries are handled by our support team, who will escalate data rights requests to the appropriate internal function.