pk18 Privacy Policy

1. Who We Are

pk18 (referred to throughout this Privacy Policy as "pk18", "we", "us", or "our") operates the online betting and casino platform available at pk18.bet, including any associated mobile applications and related services (collectively, the "Platform"). pk18 is the data controller responsible for the personal data collected through the Platform.

pk18 is Pakistan's premier online betting and casino platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, and throughout the country. We operate under an international gaming licence and are committed to maintaining the highest standards of data protection for all our users.

This Privacy Policy applies to all personal data that pk18 collects when you visit the Platform, register an account, make deposits or withdrawals, place bets, play casino games, contact our support team, or otherwise interact with our services. By using the pk18 Platform, you acknowledge and agree to the data practices described in this Privacy Policy.

2. Personal Data We Collect

pk18 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third parties such as payment processors and identity verification providers. The categories of personal data we collect are set out below.

Data Category	Examples	Collection Method
Identity Data	Full name, date of birth, CNIC number, gender	Registration form, KYC verification
Contact Data	Email address, phone number, city of residence	Registration form, account settings
Financial Data	Payment method type, transaction history, PKR balances	Cashier / payment processor
Technical Data	IP address, device type, browser type, operating system	Automated collection via cookies / logs
Usage Data	Pages visited, bets placed, games played, session duration	Automated platform analytics
Communications Data	Support chat logs, email correspondence, feedback submissions	Customer support interactions
Verification Data	Government-issued ID scans, proof of address documents	KYC / AML compliance checks

3. How We Use Your Personal Data

pk18 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your pk18 account, including processing your registration and verifying your identity.
• Service Delivery: To provide you with access to sports betting, cricket betting, casino games, slot games, and all other pk18 services.
• Financial Transactions: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and other supported payment methods in PKR.
• Legal & Regulatory Compliance: To comply with our obligations under our international gaming licence, including KYC identity verification, anti-money laundering (AML) checks, and age verification (21+ requirement).
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, and other violations of our Terms & Conditions.
• Responsible Gaming: To monitor for indicators of problem gambling behaviour and to implement responsible gaming tools such as deposit limits, loss limits, and self-exclusion where appropriate.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyse aggregate usage patterns and improve the performance, features, and content of the pk18 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have given explicit consent or where permitted under applicable law. You may opt out at any time.

4. Legal Basis for Processing

pk18 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and pk18 — namely, the provision of betting and gaming services as set out in our Terms & Conditions.
• Legal Obligation: Processing is required for pk18 to comply with applicable legal and regulatory requirements, including KYC, AML, and responsible gaming obligations under our gaming licence.
• Legitimate Interests: Processing is necessary for pk18's legitimate interests, including fraud prevention, platform security, and improving our services, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain processing activities — particularly marketing communications and non-essential cookies — pk18 will rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Personal Data

pk18 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to binding confidentiality obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML service providers that assist pk18 in verifying the identity of account holders and meeting our regulatory obligations.
• Technology Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Game Content Providers: Licensed casino game suppliers who may receive limited technical data (such as session tokens) necessary for game delivery — no personal identity data is shared beyond what is required.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or our gaming licence obligations, pk18 may disclose personal data to relevant regulatory bodies or law enforcement agencies.

All third-party service providers with whom pk18 shares personal data are contractually required to process that data solely for the stated purposes, to maintain appropriate security standards, and not to use it for their own independent purposes.

6. International Data Transfers

pk18 operates under an international gaming licence, and some of our service providers and data processors may be located outside Pakistan. Where personal data is transferred to a jurisdiction that does not provide the same level of data protection as Pakistan, pk18 will implement appropriate safeguards — such as contractual clauses or equivalent mechanisms — to ensure your data remains protected.

By using the pk18 Platform and providing your personal data, you acknowledge that your data may be transferred to and processed in countries outside Pakistan in accordance with the safeguards described in this policy.

7. Data Retention

pk18 retains your personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to satisfy AML and gaming licence record-keeping requirements.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years in compliance with anti-money laundering regulations.
• KYC Verification Documents: Identity documents are retained for the duration of the account relationship and for five (5) years after account closure.
• Customer Support Communications: Retained for up to three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of the consent plus three (3) years as evidence of compliance.
• Technical / Usage Logs: Typically retained for up to twelve (12) months for security monitoring and fraud prevention purposes.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in accordance with our internal data management procedures.

8. Cookies & Tracking Technologies

pk18 uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session security, and understand how users interact with our services. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language, display settings, and recently viewed game categories. These improve your experience on the pk18 Platform.
• Analytics Cookies: Used to collect aggregate, anonymised data about how visitors use the Platform. This data helps pk18 understand which features are popular and where improvements can be made. No personally identifiable information is collected through analytics cookies.
• Marketing Cookies: Used only where you have provided explicit consent, to deliver relevant promotional content about pk18 offers. These are never used to track your activity across third-party websites.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the pk18 Platform.

9. Your Data Protection Rights

Depending on your circumstances and applicable law, you may have the following rights with respect to your personal data held by pk18:

• Right of Access: You have the right to request a copy of the personal data pk18 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: In certain circumstances, you have the right to request that pk18 delete your personal data. This right may be limited where we are required to retain data to comply with legal or regulatory obligations.
• Right to Restrict Processing: In certain circumstances, you may request that pk18 restrict the processing of your personal data while a dispute or verification request is being resolved.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request that pk18 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including for direct marketing purposes. Where you object to direct marketing, we will cease processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights listed above, please contact the pk18 Data Protection team at [email protected] with the subject line "Data Rights Request". pk18 will respond to all valid requests within 30 calendar days. We may need to verify your identity before processing your request.

10. Children & Minors

The pk18 Platform is strictly for individuals aged 21 years and above. pk18 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an underage user, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered an account on the pk18 Platform without your knowledge, please contact us immediately at [email protected]. We take our underage gambling prevention obligations extremely seriously and will act promptly on all such reports.

11. Security Measures

pk18 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the pk18 Platform.
• Encryption of sensitive data at rest within our database systems.
• Multi-factor authentication options for user account access.
• Regular security audits and penetration testing of Platform infrastructure.
• Strict internal access controls — employee access to personal data is restricted on a need-to-know basis.
• Staff training on data protection and information security obligations.
• Incident response procedures for the detection, reporting, and management of personal data breaches.

In the unlikely event of a data breach that poses a risk to your rights and freedoms, pk18 will notify affected users and the relevant authorities in accordance with our obligations under applicable data protection law.

12. Amendments to This Privacy Policy

pk18 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our service offerings. When we make material changes to this policy, we will notify registered users via email or an in-platform notification, and we will update the "Last Updated" date at the top of this document.

Your continued use of the pk18 Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms. We encourage you to review this page periodically to stay informed of how pk18 protects your personal information.

13. Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pk18 handles your personal data, please reach out to our support and data protection team using the contact details below:

• Email: [email protected]
• Support Hours: 24/7, Pakistan Standard Time (PKT)
• Coverage: Serving players across all of Pakistan — Karachi, Lahore, Islamabad, Faisalabad, and beyond

This Privacy Policy was last reviewed and updated in January 2026. pk18 — Pakistan's premier online betting and casino platform.