pk30 Privacy Policy

pk30 is an online cricket betting and casino platform accessible at pk30.app, operated for the benefit of Pakistani players seeking a safe, regulated, and enjoyable digital gaming environment. References to "pk30," "we," "us," or "our" throughout this Privacy Policy refer to the operator of the pk30 Platform and all associated services.

For the purposes of data protection, pk30 acts as the data controller in respect of all personal information collected from registered players and visitors to the pk30 Platform. This means pk30 determines the purposes for which personal data is collected and the manner in which it is processed.

If you have any questions about this Privacy Policy or how your data is handled, you may contact our Data Protection team using the contact details provided in Section 13 of this document.

pk30 collects personal data from you directly when you register an Account, make a deposit or withdrawal, contact customer support, or interact with any feature of the Platform. We also collect certain data automatically through your use of the Platform. The categories of personal data we collect are set out in the table below.

pk30 does not collect sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, or health information — and requests that you do not provide such information through any channel on the Platform.

pk30 uses your personal data only for the purposes described in this Privacy Policy. The primary purposes for which your data is processed are as follows:

• Account Registration & Management: To create and maintain your pk30 Account, verify your identity against your CNIC, and ensure the security of your login credentials;
• KYC & Age Verification: To confirm that you are at least 21 years of age and to satisfy our ongoing anti-money laundering obligations under applicable regulatory requirements;
• Processing Transactions: To process your PKR deposits via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, and to facilitate withdrawals to your verified payment method in a timely and accurate manner;
• Service Delivery: To provide access to cricket betting markets (including PSL, T20Is, ODIs), casino games, slot games, Super Keno, and the Circle game;
• Customer Support: To respond to your queries, resolve complaints, and maintain records of our communications for quality assurance and training purposes;
• Fraud Prevention & Security: To detect and prevent fraudulent account activity, duplicate registrations, money laundering, and platform abuse using automated screening tools and manual review processes;
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to comply with our responsible gaming obligations;
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and match-day betting alerts via SMS or email. You may withdraw this consent at any time;
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving Platform performance, user experience, and the range of betting markets and games offered;
• Legal Compliance: To meet our obligations under applicable laws and regulations, including financial crime regulations, taxation requirements, and any lawful requests from regulatory or law enforcement authorities.

pk30 will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or establishing another lawful basis for the new processing activity.

pk30 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity in question:

• Contractual Necessity: Processing that is necessary to perform the contract between you and pk30 — including operating your Account, settling bets, and processing deposits and withdrawals;
• Legal Obligation: Processing required to comply with applicable law, including KYC identity verification, AML transaction monitoring, and responding to lawful orders from regulatory authorities or courts;
• Legitimate Interests: Processing carried out for pk30's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud detection, platform security, and internal analytics;
• Consent: Where pk30 relies on your consent as the legal basis for processing — most notably for marketing communications — you have the right to withdraw that consent at any time by updating your preferences in Account settings or by contacting customer support.

Where processing is based on legitimate interests, pk30 has conducted a balancing assessment to confirm that the processing is proportionate and does not unduly prejudice your fundamental rights and freedoms.

pk30 does not sell, rent, or disclose your personal data to third parties for their own independent commercial purposes. Your data may be shared with carefully selected third parties only in the following circumstances and only to the extent strictly necessary:

• KYC & Identity Verification Partners: Regulated identity verification service providers engaged by pk30 to process CNIC verification. These partners are contractually bound to handle your data in accordance with applicable data protection standards and are prohibited from using your data for any purpose other than identity verification for pk30;
• Payment Processors: Payment service providers including the operators of JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, to the extent necessary to process your deposit and withdrawal transactions;
• Gaming Software Suppliers: Certified third-party game providers whose software powers casino games, slot machines, Super Keno, and Circle on the pk30 Platform. These suppliers receive only the technical session data necessary to deliver game outcomes and are subject to strict data processing agreements;
• Fraud Prevention & AML Services: Third-party screening tools used to detect fraudulent activity, match sanctions lists, and monitor for money laundering patterns as required by applicable law;
• Regulatory & Law Enforcement Authorities: Where pk30 is legally required or compelled by a valid court order, regulatory direction, or law enforcement request to disclose your personal data, we will do so and will notify you where permitted by law;
• Auditors & Legal Advisers: Professional advisers — including external auditors, lawyers, and compliance consultants — who are bound by professional confidentiality obligations and engage with player data only to the extent required to advise pk30.

pk30 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your session and preferences, and to gather anonymised analytics data that helps us improve the user experience for Pakistani players. The categories of cookies used by pk30 are described below:

• Strictly Necessary Cookies: These are essential to the operation of the Platform and cannot be disabled. They include session authentication cookies that keep you securely logged in to your Account, cookies that maintain your balance display, and security tokens that protect against cross-site request forgery (CSRF) attacks;
• Functional Cookies: These remember your preferences — such as your preferred language, odds format, and game lobby layout — so that you do not need to reset them each session. Disabling these cookies will reduce Platform functionality but will not prevent access;
• Analytics Cookies: pk30 uses privacy-respecting analytics tools to collect aggregated, anonymised information about how players navigate the Platform. This data is used internally to identify performance issues and improve the user experience. No individual player is identified in analytics reports;
• Responsible Gaming Cookies: Technical cookies used to enforce session time limits, deposit limit rules, and cooling-off period restrictions associated with your responsible gaming settings.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair or prevent your ability to use the pk30 Platform. pk30 does not use third-party advertising or retargeting cookies.

pk30 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The key retention periods applied by pk30 are as follows:

• Account Data & KYC Records: Retained for a minimum of five years following Account closure, as required by anti-money laundering regulations applicable to licensed gaming operators;
• Transaction Records: Full deposit, withdrawal, and betting transaction histories are retained for a minimum of five years from the date of each transaction for AML, tax, and dispute resolution purposes;
• Customer Support Communications: Chat logs and support tickets are retained for three years from the date of the last interaction;
• Marketing Consent Records: Records of your marketing opt-in and opt-out history are retained for the duration of your Account and for three years following Account closure as evidence of consent management compliance;
• Technical & Usage Logs: Server logs and session data are retained for 90 days and then automatically deleted or anonymised.

Upon expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, the resulting anonymised dataset cannot be used to re-identify you and is no longer subject to this Privacy Policy.

As a pk30 player, you have the following rights in relation to your personal data. pk30 is committed to honouring these rights without undue delay and, in any event, within 30 days of a verified request:

• Right to Access: You may request a copy of the personal data pk30 holds about you, together with information about how it is being processed;
• Right to Rectification: You may request that inaccurate or incomplete personal data held by pk30 be corrected. You may update most contact information directly through your Account settings;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to pk30's legal retention obligations described in Section 7;
• Right to Restriction: You may request that pk30 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested;
• Right to Data Portability: You may request that pk30 provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider;
• Right to Object: You may object to processing of your data based on pk30's legitimate interests. pk30 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights;
• Rights Related to Automated Decision-Making: Where pk30 makes decisions about your Account — such as fraud flags or responsible gaming interventions — using automated processes, you have the right to request human review of any such decision;
• Right to Withdraw Consent: Where processing is based on your consent — for example, for marketing communications — you may withdraw that consent at any time via Account settings or by contacting support. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of these rights, please contact pk30 using the details in Section 13. pk30 will verify your identity before actioning any data rights request to protect against unauthorised disclosure.

pk30 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• AES-256 encryption of all personal data at rest on pk30 servers;
• TLS 1.3 encryption of all data transmitted between your device and pk30 infrastructure;
• Multi-factor authentication requirements for all internal pk30 staff accounts with access to player data;
• Role-based access controls that limit data access to authorised personnel on a strict need-to-know basis;
• Automated intrusion detection and anomaly monitoring systems that alert the security team to suspicious access patterns;
• Regular penetration testing conducted by independent third-party security specialists;
• Secure, geographically redundant data centre infrastructure with physical access controls.

Despite these measures, no digital platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, pk30 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

pk30 applies strict CNIC-based age verification controls to prevent individuals under the age of 21 from registering Accounts or accessing any betting or gaming services. The CNIC verification process cross-references the date of birth recorded on your national identity card to confirm that the minimum age requirement is met before Account activation.

If pk30 discovers or has reasonable grounds to believe that a registered player is under 21 years of age, pk30 will immediately suspend the Account, cease all processing of that player's personal data for gaming purposes, and initiate an investigation. Any real-money deposits made by an underage player will be returned to the original payment source. All associated gaming activity will be voided.

If you are a parent or guardian and believe your child may have registered on pk30 without your knowledge, please contact our customer support team immediately using the details in Section 13. pk30 will take prompt action to close the Account and address any associated data concerns.

The pk30 Platform integrates with a limited number of third-party service providers to deliver core functionality. Each third-party integration is governed by a formal data processing agreement that requires the provider to handle player data only on pk30's instructions and in accordance with applicable data protection standards. pk30 does not permit any third-party service provider to use player data for their own independent commercial purposes.

Third-party services currently integrated into the pk30 Platform include:

• Payment Gateways: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank payment processing infrastructure. Each payment provider operates under its own privacy policy in respect of data processed directly through their systems. pk30 recommends reviewing the privacy policies of your payment provider for further information;
• Game Software Providers: Certified casino game suppliers whose RNG-based games are embedded within the pk30 Casino, slot, Super Keno, and Circle sections. These providers receive anonymised session tokens rather than directly identifiable personal data;
• Identity Verification: A regulated KYC verification partner that processes CNIC and identity document data strictly for the purpose of age and identity confirmation on behalf of pk30.

pk30 is not responsible for the privacy practices of any external website or service that is not operated by pk30. This Privacy Policy applies exclusively to data processed by pk30 in connection with the pk30 Platform.

pk30 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform functionality, or our internal data processing practices. The "Last Updated" date at the top of this document will be revised each time a material change is made.

Where amendments are material — meaning they significantly affect your rights or the manner in which your data is processed — pk30 will notify registered players via the mobile number or email address associated with their Account at least seven days before the changes take effect, where practicable.

Your continued use of the pk30 Platform following the publication of an amended Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any amendment, you may request Account closure in accordance with our Terms & Conditions and submit a data erasure request under Section 8 of this Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how pk30 handles your personal data, please contact our Data Protection team. Our support team is available 24/7 and typically responds to data-related enquiries within two business days.

If you are not satisfied with pk30's response to your privacy concern, you have the right to escalate your complaint to the relevant regulatory authority in the jurisdiction in which pk30 is licensed. Details of the applicable supervisory authority are available on request from pk30's Data Protection team.