- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. Legal Basis for Processing
- 5. How We Use Your Data
- 6. Cookies & Tracking
- 7. Data Sharing & Disclosure
- 8. International Data Transfers
- 9. Data Retention
- 10. Security Measures
- 11. Your Rights
- 12. Children's Privacy
- 13. Pakistan-Specific Notice
- 14. Policy Amendments
- 15. Contact & Complaints
Introduction
This Privacy Policy ("Policy") describes how pk626, operated through https://pk626.cam ("Platform", "We", "Us", "Our"), collects, processes, stores, uses and shares personal data about individuals ("User", "You") who access or use the Platform, register an account, communicate with our support team, or interact with our services in any other way.
pk626 is an English-language online gaming information and services platform designed for users in Pakistan. We do not claim a physical office in Pakistan and we do not hold any license issued by Pakistani governmental authorities. Personal data collected through this Platform is processed in accordance with the privacy and data protection obligations applicable under the operator's licensing framework.
By registering an account, using any service on the Platform, or continuing to browse after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact us to request account closure.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling page, both of which contain additional provisions relevant to your use of pk626.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, CNIC number, IP address, device identifiers and financial account details. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction. |
| "Controller" | The entity that determines the purposes and means of processing Personal Data — in this context, the operator of the pk626 Platform. |
| "Processor" | A third party that processes Personal Data on behalf of the Controller, such as a KYC provider, payment processor or cloud infrastructure provider. |
| "Consent" | A freely given, specific, informed and unambiguous indication of the User's agreement to the processing of their Personal Data for a stated purpose. |
| "KYC" | Know Your Customer — the identity and age verification process used to confirm User eligibility and comply with AML obligations. |
| "Cookies" | Small text files stored on a User's device by a web browser, used to maintain sessions, store preferences and track usage behaviour. |
Data We Collect
pk626 collects Personal Data through several channels: directly from You when you register or interact with the Platform; automatically through your use of the Platform; and from third-party service providers such as KYC and payment verification partners. The categories of data we collect are set out below.
- Full legal name, date of birth and gender.
- Residential address, city and country (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar).
- Email address and account username.
- Hashed/salted password (we do not store passwords in plain text).
- Phone number, where provided for two-factor authentication or support purposes.
- Scanned or photographed copies of government-issued identity documents — CNIC (Computerized National Identity Card) front and reverse, or passport bio-data page.
- Proof of address documents (utility bills, bank statements or official letters dated within three months), where required.
- Selfie or liveness verification images used for biometric identity matching against submitted documents.
- Deposit and withdrawal transaction records including amount (PKR and/or crypto equivalent), date, time and payment method reference.
- Payment method identifiers (e.g., masked bank account numbers, wallet identifiers for Easypaisa, JazzCash or Raast, or cryptocurrency wallet addresses). Payment provider names are referenced as familiar local payment brands — pk626 does not claim endorsement by any payment provider.
- Bonus and promotional transaction records, including wagering activity relevant to bonus eligibility.
- IP address and geolocation data (country and city level).
- Browser type, version and language settings; operating system; device type and screen resolution.
- Pages viewed, features accessed, time spent on pages, navigation paths and referring URLs.
- Session identifiers and authentication logs, including login timestamps and logout events.
- Records of live chat sessions, email correspondence and any support tickets submitted to our team.
- Responses to surveys, feedback forms or promotional participation, where applicable.
Legal Basis for Processing
Where privacy regulations applicable to the operator's licensing jurisdiction require a lawful basis for processing Personal Data, pk626 relies on one or more of the following legal bases depending on the specific processing activity:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual Necessity | Processing required to register your account, process deposits and withdrawals, maintain your account balance, and deliver the gaming services you have requested. |
| Legal Obligation | KYC/AML identity verification, fraud prevention, age verification, regulatory reporting and data retention obligations imposed by the operator's license conditions. |
| Legitimate Interests | Platform security, fraud detection, responsible gambling monitoring, system performance analytics and internal business improvement — where such interests are not overridden by your fundamental rights. |
| Consent | Non-essential marketing communications (email newsletters, promotional offers) and non-essential analytics/advertising cookies — where you have provided explicit opt-in consent. |
Where we rely on your Consent as the legal basis for processing, you have the right to withdraw that consent at any time by contacting our support team or adjusting your account preferences. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.
How We Use Your Data
Personal Data collected by pk626 is used exclusively for the purposes set out below. We do not use your data for purposes incompatible with those for which it was originally collected without obtaining fresh consent or identifying another lawful basis.
- Account Management: Creating, maintaining and securing your registered account; processing login and authentication events; managing account preferences and responsible gambling tool settings.
- Service Delivery: Processing deposits and withdrawals; crediting and debiting bonus funds; resolving game outcomes and sports betting settlements; delivering customer support responses.
- Identity & Age Verification: Conducting KYC checks to verify your identity, confirm your age (18+ or higher minimum where applicable) and comply with AML obligations.
- Fraud & Security: Detecting suspicious activity, preventing unauthorized access, identifying multi-accounting and monitoring for patterns consistent with money laundering or other prohibited conduct.
- Responsible Gambling: Monitoring play patterns for indicators of problem gambling behavior; applying responsible gambling controls; processing self-exclusion requests and enforcing cool-off periods.
- Marketing Communications: Sending promotional information, bonus notifications and platform updates to users who have opted in. You may opt out at any time via the unsubscribe link in any email communication or by contacting support.
- Platform Improvement: Analyzing aggregate usage data to identify areas for improvement, test new features and enhance the overall user experience.
- Legal Compliance: Retaining records as required by the operator's license conditions, responding to lawful requests from regulatory or law enforcement authorities, and managing legal claims or disputes.
Cookies & Tracking Technologies
pk626 uses cookies and similar tracking technologies to deliver a functional, personalized and secure experience on the Platform. A cookie is a small text file stored on your device by your web browser when you visit a website.
| Cookie Type | Purpose | Essential? |
|---|---|---|
| Session Cookies | Maintain your authenticated session while you are logged in. Automatically deleted when you close your browser. | Yes |
| Security Cookies | Detect and prevent cross-site request forgery (CSRF) and session hijacking attempts. | Yes |
| Preference Cookies | Store your language, display and notification preferences so they persist between visits. | No |
| Analytics Cookies | Collect aggregate data about how users navigate the Platform to help us identify performance issues and improvement opportunities. | No |
| Responsible Gambling Cookies | Store session timer state and self-exclusion flags to enforce responsible gambling controls across sessions. | Yes |
You can control non-essential cookies through your browser's settings. Disabling essential cookies may impair core Platform functionality, including login persistence and security controls. pk626 does not use third-party advertising or tracking pixels to serve behaviorally targeted advertising on external websites.
Data Sharing & Disclosure
pk626 does not sell, rent or commercially trade your Personal Data to third parties. Data is shared only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.
- KYC & Identity Verification Providers: Licensed third-party identity verification services that process your CNIC, passport or liveness data to complete the verification process on our behalf. These processors are contractually bound to handle your data securely and only for the purposes we specify.
- Payment Processors: Financial service providers that facilitate deposit and withdrawal transactions. Payment provider names familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — may be referenced as processing channels. These providers operate under their own privacy policies and are independent data controllers in respect of the information they process.
- Fraud Prevention & AML Services: Third-party screening tools used to verify sanctions lists, politically exposed person (PEP) databases and fraud signals.
- Technology Infrastructure Providers: Cloud hosting, content delivery and database management providers who process data on our behalf under data processing agreements with appropriate security obligations.
- Regulatory & Law Enforcement Authorities: Where we are legally required to disclose Personal Data in response to a valid court order, subpoena, regulatory investigation or law enforcement request, we will comply with such obligations. Where lawfully permitted to do so, we will attempt to notify you of such a request before disclosure.
- Business Transfers: In the event of a merger, acquisition, reorganization or sale of all or substantially all of the operator's assets, Personal Data held about registered users may be transferred to the acquiring entity, subject to equivalent data protection commitments.
pk626 never shares your Personal Data with payment providers, banks or wallet services for purposes other than processing a transaction you have directly initiated. The mention of Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah in the context of payment processing does not imply that any of these institutions endorse pk626 or have a commercial relationship with the operator beyond payment facilitation.
International Data Transfers
Personal Data collected through pk626 may be transferred to, stored on, or processed by systems located outside Pakistan. The operator maintains data processing infrastructure and uses third-party service providers in various jurisdictions.
Where Personal Data is transferred to a jurisdiction that does not have privacy laws equivalent to those under which the operator is licensed, the operator will implement appropriate safeguards — such as standard contractual clauses or equivalent data transfer mechanisms — to ensure that your data receives a comparable level of protection.
Pakistan's Prevention of Electronic Crimes Act (PECA) 2016 and its associated regulations may have implications for how data relating to Pakistani citizens is handled. pk626 acknowledges its Pakistani user base and takes reasonable steps to handle their data responsibly. This Policy does not constitute legal advice on Pakistani data protection law. Users with specific concerns are encouraged to seek independent legal guidance.
Data Retention
pk626 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying licensing, legal and audit obligations. Retention periods vary by data category, as summarized below.
| Data Category | Retention Period |
|---|---|
| Account & Registration Data | Duration of account plus a minimum of 5 years post-closure (or as required by operator license conditions). |
| KYC / Identity Documents | Duration of account plus a minimum of 5 years post-closure to satisfy AML obligations. |
| Financial Transaction Records | Minimum of 5 years from the date of each transaction, in accordance with anti-money laundering regulatory requirements. |
| Support Communications | 3 years from the date of last interaction, unless extended by an active dispute or legal hold. |
| Analytics & Usage Data | Up to 24 months from collection, after which data is aggregated or deleted. |
| Self-Exclusion Records | Retained indefinitely to ensure re-registration during an active exclusion period is prevented. |
Upon expiry of the relevant retention period, Personal Data will be securely deleted or anonymized so that it can no longer be attributed to an identifiable individual. Where a legal hold applies (e.g., pending litigation or regulatory investigation), retention will be extended accordingly.
Security Measures
pk626 takes the security of your Personal Data seriously and implements a range of technical and organizational measures to protect it against unauthorized access, accidental loss, alteration or destruction.
- Encryption in Transit: All data exchanged between your device and the pk626 Platform is protected using TLS (Transport Layer Security) encryption. HTTPS is enforced across all pages.
- Encryption at Rest: Sensitive data including KYC documents and financial records are stored in encrypted form within access-controlled storage environments.
- Access Controls: Staff access to Personal Data is governed by role-based access controls on a strict need-to-know basis. All access events are logged and audited.
- Password Security: User passwords are stored using industry-standard one-way hashing with salt. Plaintext passwords are never stored or transmitted.
- Incident Response: pk626 maintains documented security incident response procedures. In the event of a data breach that poses a risk to your rights, affected users will be notified in accordance with applicable obligations.
Your Responsibility: You are responsible for maintaining the confidentiality of your login credentials. Never share your password with anyone. pk626 will never ask for your password via email, live chat or telephone. If you suspect your account has been compromised, contact support immediately at [email protected].
Your Rights
Depending on the data protection framework applicable under the operator's licensing jurisdiction, you may have some or all of the following rights in relation to your Personal Data. pk626 is committed to facilitating the exercise of these rights in a timely and transparent manner.
Request a copy of the Personal Data we hold about you, including how and why it is being processed.
Request correction of inaccurate or incomplete Personal Data held about you.
Request deletion of your Personal Data where we no longer have a lawful basis for retaining it. This right may be limited by legal retention obligations.
Request that we restrict processing of your data in certain circumstances — for example, while a rectification request is being assessed.
Receive a copy of your data in a structured, machine-readable format for transfer to another service, where technically feasible.
Object to processing carried out on the basis of legitimate interests or for direct marketing purposes. You may opt out of marketing emails at any time.
To exercise any of these rights, please contact us at [email protected]. We aim to acknowledge rights requests within 5 business days and to resolve them within 30 calendar days. We may need to verify your identity before processing a request.
Children's Privacy
pk626 is strictly an adults-only platform. Access is prohibited to individuals under the age of 18, or the higher minimum age required by the operator's licensing jurisdiction. We do not knowingly collect, process or retain Personal Data relating to children under the applicable minimum age.
If we become aware or have reasonable grounds to believe that an account has been registered by or used by an underage individual, we will immediately suspend the account, initiate an investigation, and take all steps required under our licensing obligations including voiding any associated transactions and returning deposited funds to the verified payment source.
If you believe that a minor may have registered on pk626 using false information, please contact our support team immediately at [email protected]. We take underage gambling extremely seriously and will act promptly on any such report.
Pakistan-Specific Notice
pk626 is an English-language platform designed for Pakistani users. We acknowledge the specific context in which Pakistani users access the Platform and provide the following notice in respect of applicable local considerations.
- No Pakistani Government Authorization: pk626 does not claim authorization, endorsement or licensing from the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, any provincial authority or any Pakistani financial institution, including HBL, UBL, Meezan Bank, Bank Alfalah, Easypaisa, JazzCash or Raast.
- CNIC Data: Your CNIC number and document images are collected solely for identity and age verification purposes as required by the operator's licensing obligations. They are stored securely, not shared commercially, and retained only for the period required by applicable AML and licensing rules.
- Applicable Law: Pakistan has gambling restrictions under applicable federal and provincial law, including the Prevention of Gambling Act, 1977. This Privacy Policy does not constitute legal advice. Users are solely responsible for ensuring their use of the Platform complies with applicable local law.
- Data Localisation: pk626 does not represent that user data is stored within Pakistan. Data may be processed and stored on servers located outside Pakistan, subject to international data transfer safeguards described in Section 8.
Policy Amendments
pk626 reserves the right to update or revise this Privacy Policy at any time. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Where changes are material — for example, a new category of data being collected, a change in how data is shared, or a change in retention periods — we will notify registered users via their registered email address and/or by a prominent notice on the Platform.
Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you must discontinue use of the Platform and request account closure by contacting our support team.
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or would like to raise a complaint about how your Personal Data has been handled, please contact the pk626 data team using the details below.
If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your complaint to the relevant data protection supervisory authority in the operator's licensing jurisdiction. pk626 will provide guidance on this escalation process upon request.