pk135 Privacy Policy

1 Introduction

1.1 This Privacy Policy is issued by pk135 ("we", "us", "our", or "the Company") and applies to all personal data collected from individuals ("you", "the Player") who visit, register with, or use the pk135 platform, including the website at pk135.app, any associated mobile applications, and all related services.

1.2 pk135 is committed to protecting the privacy and security of all personal data it processes. This Privacy Policy sets out a transparent account of the types of personal data we collect, the purposes for which we process it, the parties with whom we may share it, and the rights you hold with respect to your own information.

1.3 By registering a pk135 account, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy. Where your consent is required as the legal basis for processing, we will seek that consent separately and explicitly before processing commences.

1.4 This Privacy Policy should be read in conjunction with the pk135 Terms & Conditions, which govern your overall use of the platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions with respect to the handling of personal data, this Privacy Policy shall prevail.

2 Personal Data We Collect

2.1 pk135 collects the following categories of personal data from players:

2.2 pk135 does not collect special categories of sensitive personal data (such as racial origin, political opinions, biometric data, or health data) unless specifically required by our responsible gaming obligations — for example, where a player voluntarily discloses a gambling-related health concern to our support team.

3 How We Collect Your Data

3.1 Directly from you — when you complete the registration form on the pk135 Login page, submit KYC documents, make a deposit or withdrawal, contact our support team, or respond to any survey or promotional communication.

3.2 Automatically — when you access the pk135 platform, our systems automatically log technical and usage data including your IP address, device identifiers, browser characteristics, and interaction patterns. This is standard practice for all online platforms and is necessary for security and platform optimisation purposes.

3.3 From third parties — pk135 may receive personal data about you from the following third-party sources:

• Payment processors (e.g., JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) — to confirm transaction status and validate payment method ownership;
• Identity verification service providers — to assist with KYC checks where automated document verification is used;
• Anti-fraud and AML screening services — to screen against sanctions lists and detect suspicious activity patterns;
• Analytics providers — to understand aggregate platform usage trends (no personal identifiers are shared with analytics providers).

4 Purposes of Processing

4.1 pk135 processes your personal data only for defined, specific purposes. The table below sets out each processing purpose and the category of data involved:

4.2 pk135 does not use your personal data for automated decision-making that produces significant legal effects on you without human review, except where required or permitted by applicable law or regulation.

5 Legal Basis for Processing

5.1 pk135 processes your personal data on one or more of the following legal bases:

• Contract performance — processing that is necessary to fulfil the contract between you and pk135, including operating your account, processing transactions, and providing the services you have requested;
• Legal obligation — processing required to comply with KYC, AML, responsible gaming, and data retention obligations imposed by our international gaming license and applicable laws;
• Legitimate interests — processing carried out in pursuit of pk135's legitimate business interests, including fraud prevention, platform security, and improving the player experience, provided those interests are not overridden by your rights and interests;
• Consent — where no other legal basis applies, or where we are required by law to obtain your consent before processing, we will seek your clear and explicit consent before any such processing takes place. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Third Parties

6.1 pk135 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes under any circumstances.

6.2 pk135 may share your personal data with the following categories of third party, strictly on a need-to-know basis and only to the extent necessary for the relevant purpose:

• Payment processors — JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, Visa, and Mastercard, solely for the purpose of processing your deposits and withdrawals;
• Identity verification providers — third-party KYC services used to verify the authenticity of identity documents submitted by players;
• AML and sanctions screening services — to check player identities against financial crime watchlists as required by our licensing obligations;
• IT infrastructure and cloud service providers — who host and maintain the pk135 platform under strict data processing agreements that bind them to the same privacy standards as pk135;
• Professional advisers — lawyers, accountants, and auditors who are bound by professional confidentiality obligations;
• Regulatory and law enforcement authorities — where we are required or permitted by law, court order, or our gaming license to disclose personal data, including suspected AML activity reports.

6.3 Any third party that receives personal data from pk135 is required to process that data in accordance with applicable data protection law and the terms of a written data processing agreement with pk135.

7 International Data Transfers

7.1 pk135 is an internationally licensed platform. As a result, your personal data may be processed by pk135 staff or third-party service providers located outside of Pakistan. Where such transfers occur, pk135 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under our licensing obligations.

7.2 Safeguards employed for international data transfers include contractual data protection clauses, binding corporate rules where applicable, and reliance on adequacy decisions where the receiving jurisdiction has been determined to provide an adequate level of data protection.

7.3 If you would like further information about the specific safeguards in place for any international transfer of your personal data, please contact our Data Protection team using the details provided in Section 14.

8 Data Retention

8.1 pk135 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Active player accounts — all personal data is retained for the duration of your account being open with pk135;
• Closed accounts — identity, financial, and transaction data is retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• KYC verification documents — retained for a minimum of five (5) years from the date of verification or account closure, whichever is later;
• Customer support records — retained for three (3) years from the date of the interaction;
• Technical and usage logs — retained for up to twelve (12) months for security and platform performance purposes, then deleted or anonymised.

8.2 Where personal data is no longer required and no legal obligation requires its retention, pk135 will securely delete or anonymise that data in accordance with our internal data disposal procedures.

9 Cookies & Tracking Technologies

9.1 pk135 uses cookies and similar tracking technologies on the platform to maintain session state, ensure platform security, remember user preferences, and collect aggregate usage analytics.

9.2 The following categories of cookies are used:

• Strictly necessary cookies — essential for the platform to function correctly. These cannot be disabled as they are required for account login sessions, security tokens, and core platform features;
• Functional cookies — used to remember your preferences, such as language settings and game lobby layout preferences;
• Analytics cookies — used to collect anonymised, aggregate information about how players use the pk135 platform, helping us improve performance and usability. No personal identifiers are included in analytics data;
• Security cookies — used to detect and prevent fraudulent activity, bot access, and multiple account creation attempts.

9.3 You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent your ability to log in and use the pk135 platform.

9.4 pk135 does not use third-party advertising or behavioural targeting cookies.

10 Your Data Protection Rights

10.1 Subject to applicable law and the conditions attached to each right, you hold the following rights with respect to the personal data pk135 holds about you:

10.2 To exercise any of the above rights, please contact the pk135 Data Protection team via Live Chat or by email at [email protected]. We will verify your identity before processing any data subject request. We aim to respond to all verified requests within 30 calendar days.

10.3 We will not charge a fee for handling data subject requests unless a request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may apply.

11 Children & Minors

11.1 The pk135 platform is strictly intended for individuals aged 21 years and over. pk135 does not knowingly collect personal data from any person under the age of 21.

11.2 Where pk135 discovers or is notified that personal data has been collected from a person under the age of 21, we will take immediate steps to: close the relevant account, delete all associated personal data, and return any deposits made in accordance with our responsible gaming procedures.

11.3 If you are a parent or guardian and believe that a minor in your care has registered an account with pk135, please contact our support team immediately via Live Chat or at [email protected]. We treat all such reports as urgent and will respond within 24 hours.

12 Security Measures

12.1 pk135 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the pk135 platform;
• Encryption of sensitive data at rest, including financial records and identity verification documents;
• Role-based access controls, limiting data access to authorised personnel only;
• Multi-factor authentication for all staff accounts with access to player data systems;
• Regular penetration testing and security audits by independent third parties;
• Automated intrusion detection systems monitoring for suspicious access patterns;
• Secure data backup procedures with geographically distributed redundancy.

12.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pk135 will notify you without undue delay in accordance with our obligations under applicable data protection law.

12.3 While pk135 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your pk135 Login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

13 Updates to This Privacy Policy

13.1 pk135 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our licensing obligations. All updates will be published on this page with a revised effective date.

13.2 Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how your data is processed — pk135 will notify registered players by email to the address associated with their account, no less than fourteen (14) days before the changes take effect.

13.3 Your continued use of the pk135 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised policy, you must cease using the platform and may close your account by contacting our support team.

14 Contact & Data Protection Enquiries

14.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which pk135 handles your personal data, please contact us through the following channels:

• Live Chat: Available on every page of the pk135 platform, 24 hours a day, 7 days a week — including during PSL match evenings and public holidays across Pakistan.
• Email: [email protected]  (plain text — not a clickable link)

14.2 When submitting a data protection enquiry or exercising a data subject right, please include your registered account username and a brief description of your request. We will verify your identity before processing any request involving personal data.

14.3 pk135 aims to resolve all privacy-related enquiries promptly and fairly. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection supervisory authority or the dispute resolution body designated under our international gaming license.