Privacy Policy

Section 01

Introduction

This Privacy Policy (the "Policy") describes how pk8866 (the "Operator", "We", "Us", "Our") collects, uses, stores, discloses and otherwise processes personal data relating to individuals ("Users", "You", "Your") who access or use the pk8866 platform available at pk8866.cam (the "Platform").

pk8866 is an English-language online sports betting and casino platform designed primarily for Pakistani users. We are committed to handling your personal data responsibly, transparently and in a manner consistent with applicable data protection principles. This Policy is intended to give you a clear understanding of our data practices so that you can make informed decisions about your use of the Platform.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and pk8866. In the event of any conflict between this Policy and the Terms & Conditions on matters relating to personal data, this Policy shall prevail.

Section 02

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

Section 03

Data Controller

3.1   pk8866 acts as the Data Controller with respect to personal data collected from users of the Platform. As Data Controller, we are responsible for ensuring that personal data is processed in accordance with applicable data protection law and the principles set out in this Policy.

3.2   Where we engage third-party service providers to process personal data on our behalf (for example, payment processors, identity verification providers or analytics services), those parties act as Data Processors. We enter into written data processing agreements with all such processors that require them to process data only on our documented instructions, maintain appropriate security measures and not engage sub-processors without our prior authorisation.

3.3   If you have questions about the identity of the Data Controller or wish to exercise any of your data subject rights, please refer to Section 15 (Contact Us) for the appropriate contact channel.

Section 04

Data We Collect

pk8866 collects the following categories of personal data in connection with the operation of the Platform:

4.1 Registration and Identity Data

• Full legal name as it appears on official identification;
• Date of birth (for age verification purposes);
• Residential address, including city and country (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or other locations);
• Email address and mobile phone number;
• Chosen username and encrypted password.

4.2 KYC Verification Data

• Copies of government-issued identity documents (e.g., CNIC, passport);
• Proof of address documents where required;
• Liveness check or selfie images where the verification process requires them;
• Payment method verification documents (e.g., confirmation of account ownership).

4.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates and payment method references;
• Partial payment instrument details (e.g., masked card numbers or mobile wallet identifiers) — full card numbers are never stored by pk8866;
• Transaction history and account balance records;
• Bonus and promotional credit records.

4.4 Betting and Gaming Activity Data

• Bets placed, markets selected, stakes and returns;
• Casino and slot game session records;
• Live casino participation records;
• Responsible gambling tool activations (deposit limits, self-exclusion requests, etc.).

4.5 Technical and Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system and browser version;
• Session timestamps and duration;
• Referring URLs and navigation paths within the Platform.

4.6 Communications Data

• Content of live chat support conversations;
• Email correspondence with the support team;
• Records of marketing communication preferences and opt-in/opt-out history.

Section 05

How We Collect Personal Data

pk8866 collects personal data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit, contact support or respond to a survey;
• Automatically — through cookies, server logs and similar tracking technologies when you browse or use the Platform (see Section 8);
• From third-party verification providers — identity verification results, fraud signals and politically exposed person (PEP) or sanctions screening outcomes from our KYC and compliance service providers;
• From payment processors — transaction confirmation data, payment status and fraud prevention signals related to deposits and withdrawals;
• From analytics providers — aggregated behavioural and performance analytics used to improve platform functionality.

Section 06

Purposes of Processing & Legal Bases

We process your personal data only where we have a valid legal basis to do so. The table below sets out our key processing purposes and the corresponding legal basis for each:

Section 07

Data Sharing & Disclosure

7.1   pk8866 does not sell your personal data to any third party. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: To facilitate deposit and withdrawal transactions. Only the data necessary to process the relevant transaction is shared.
• KYC and identity verification providers: To verify your identity, age and address as part of our compliance obligations.
• Anti-fraud and risk management providers: To detect, investigate and prevent fraudulent activity, money laundering and other prohibited conduct.
• Analytics and platform performance services: To understand how the Platform is used and to identify areas for improvement. Data shared for this purpose is minimised and anonymised where possible.
• IT infrastructure and hosting providers: Who store and process Platform data on our behalf under strict confidentiality and data processing agreements.
• Regulatory and law enforcement authorities: Where we are required by applicable law, court order or regulatory direction to disclose personal data. We will notify affected users of such disclosures where we are lawfully permitted to do so.
• Successors in business: In the event of a merger, acquisition or sale of all or part of the Operator's business, personal data may be transferred as part of that transaction, subject to equivalent privacy protections being maintained.

7.2   All third-party Data Processors engaged by pk8866 are required to process personal data only in accordance with our documented instructions, to maintain appropriate technical and organisational security measures, and not to engage additional sub-processors without our prior written consent.

Section 08

Cookies & Tracking Technologies

8.1   pk8866 uses cookies and similar tracking technologies (including pixel tags and local storage objects) on the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences and understand how the Platform is used.

8.2   We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens and load-balancing cookies. These cannot be disabled without significantly impairing your use of the Platform.
• Functional Cookies: Remember your preferences such as language settings, display preferences and responsible gambling tool configurations.
• Analytics Cookies: Collect anonymised or pseudonymised data about how users navigate the Platform, which pages are most visited and where errors occur. This data is used to improve platform performance and user experience.
• Security Cookies: Help detect and prevent fraudulent activity, account takeover attempts and bot traffic.

8.3   You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete certain types of cookies. Note that disabling analytics or functional cookies may affect your experience of certain platform features.

8.4   pk8866 does not use advertising or behavioural profiling cookies that track you across third-party websites for advertising purposes.

Section 09

Data Retention

9.1   pk8866 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements.

9.2   The following indicative retention periods apply to the main categories of data we hold:

9.3   Where personal data is no longer required within the applicable retention period, we will securely delete or anonymise it in a manner that makes re-identification impossible.

9.4   Retention periods may be extended where data is subject to an ongoing legal dispute, regulatory investigation or audit requirement.

Section 10

User Rights & How to Exercise Them

10.1   Subject to applicable data protection law and any statutory exceptions (including those relating to AML/CFT compliance obligations), you have the rights summarised in the grid above this section. These rights are not absolute; in some cases, we may be required or entitled to refuse a request, in which case we will explain our reasons.

10.2   To exercise any of your data subject rights, please contact us through the live chat support channel available within the Platform or by email at the address in Section 15. To protect your data, we will require you to verify your identity before processing any data subject request.

10.3   We will respond to data subject requests within a reasonable timeframe. Where a request is complex or involves a large volume of data, we may extend this period and will notify you accordingly.

10.4   Where processing is based on your consent — for example, for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

10.5   If you believe that your personal data has been processed in a manner that violates applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority in your jurisdiction.

Section 11

Data Security

11.1   pk8866 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data fields (including passwords and KYC document references) at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Multi-factor authentication for internal systems handling personal data;
• Regular security vulnerability assessments and penetration testing;
• Formal incident response procedures for data breaches, including notification obligations where required by law.

11.2   While we implement robust security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own Account credentials. If you suspect that your Account has been compromised, please contact our support team immediately.

11.3   In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, pk8866 will notify affected users without undue delay and in accordance with applicable law.

Section 12

International Data Transfers

12.1   The Platform operates internationally and some of our Data Processors may be located in jurisdictions outside the country in which you reside. Where personal data is transferred to a third country — that is, a country not considered to provide an adequate level of data protection under applicable law — we will ensure that appropriate safeguards are in place before the transfer occurs.

12.2   Appropriate safeguards for international transfers may include standard contractual clauses approved by a relevant supervisory authority, binding corporate rules, or other legally recognised transfer mechanisms.

12.3   For Pakistani users: the transfer of personal data outside Pakistan is governed by applicable Pakistani law, including any provisions of the Personal Data Protection Bill or related legislation that may be in force at the time of processing. We will comply with such requirements as they apply to the processing of your data.

Section 13

Children's Privacy

13.1   The pk8866 Platform is intended for use by adults only. We do not knowingly collect personal data from individuals under the age of 18 (or the higher minimum age applicable in the User's jurisdiction).

13.2   Age verification is conducted as part of our KYC process. If we become aware that personal data has been collected from a minor without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated Account.

13.3   If you believe that a minor has registered an Account or provided personal data to the Platform, please contact our support team immediately so that we can investigate and take appropriate action.

Section 14

Updates to This Privacy Policy

14.1   pk8866 reserves the right to update, modify or replace this Privacy Policy at any time. Changes will be posted on the Platform with a revised "Last Updated" date at the top of this page.

14.2   Where changes are material — for example, a new category of personal data being collected or a new purpose of processing being introduced — we will make reasonable efforts to notify registered users via email or an in-platform notification prior to the change taking effect.

14.3   Your continued use of the Platform following any update to this Policy constitutes acceptance of the revised Policy. We recommend that you review this page periodically to stay informed of any changes.

Section 15

Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data, please contact the pk8866 data support team through the following channels:

• Live Chat: Available 24/7 within the Platform — the preferred channel for account-related privacy queries and urgent data subject requests.
• Email (plain text — not a link): [email protected]

Our support team operates in English. Urdu-language assistance is available on request. We aim to acknowledge all written privacy requests promptly and to resolve them within a reasonable timeframe.

For questions about our responsible gambling practices or to request self-exclusion, please visit our Responsible Gambling page for dedicated resources and tools.