pkace Privacy Policy

01 Introduction & Scope

pkace is committed to safeguarding the privacy and personal data of all players who use our platform. This Policy applies to all personal data collected through the pkace website at pkace.ws, any associated mobile-optimised interfaces, customer support communications, and promotional activities conducted by pkace.

This Policy should be read alongside the pkace Terms and Conditions and Responsible Gaming Policy, which together form the complete agreement governing your relationship with the pkace platform. Where this Policy conflicts with any other document, this Policy shall prevail with respect to privacy and data protection matters.

pkace operates as an international online gaming platform serving players across Pakistan and other permitted jurisdictions. We process personal data in accordance with internationally recognised data protection principles including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

02 Data We Collect

2.1 Registration Data

When you create a pkace account, we collect the following personal information:

• Full legal name as it appears on your CNIC or passport;
• Date of birth (used to verify compliance with the 21+ age requirement);
• Pakistani mobile number (used for account verification, OTP authentication, and support);
• Email address (used for account communications and notifications);
• City of residence — for example, Karachi, Lahore, Islamabad, Faisalabad, or Rawalpindi;
• Chosen username and encrypted password.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to verify your eligibility to use the platform, pkace may request the following documents:

• A copy of your National Identity Card (CNIC) or valid passport;
• A recent utility bill or bank statement as proof of address;
• A selfie or live photograph for biometric identity matching where required.

2.3 Financial & Transaction Data

pkace records all financial transactions processed through your account, including:

• Deposit amounts, timestamps, and payment methods (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, 1LINK, USDT TRC20);
• Withdrawal requests, amounts, and processing status;
• Bonus credits received, wagering activity, and bonus expiry events;
• Account balance history and currency denomination (PKR).

pkace does not store full bank account numbers or mobile wallet PINs. Payment credentials are tokenised through our payment processing partners and are not held on pkace infrastructure in readable form.

2.4 Gaming & Behavioural Data

We record data about how you use the pkace platform, including games played, bet amounts and outcomes, session durations, login timestamps, IP addresses, device identifiers, browser type, and operating system. This data is used for responsible gaming monitoring, fraud detection, and platform improvement.

2.5 Communications Data

When you contact pkace via live chat, email, or any other support channel, we retain records of those communications including the content of messages, timestamps, and the resolution provided. This allows us to maintain quality of service and resolve any disputes accurately.

03 How We Use Your Data

pkace uses your personal data for the following specific purposes:

Purpose	Data Used	Basis
Account creation and management	Registration data, contact details	Contract
Identity and age verification (KYC)	CNIC, passport, date of birth	Legal Obligation
Processing deposits and withdrawals	Financial data, payment method details	Contract
Fraud prevention and AML compliance	Transaction data, behavioural data, IP	Legal Obligation
Responsible gaming monitoring	Gaming data, session activity, deposit patterns	Legitimate Interest
Customer support and dispute resolution	Communications data, account history	Contract
Platform security and integrity	Device identifiers, IP addresses, login data	Legitimate Interest
Personalised promotions and bonuses	Gaming preferences, account tier, activity	Consent
Service improvement and analytics	Aggregated behavioural and usage data	Legitimate Interest

04 Legal Basis for Processing

pkace processes personal data under the following legal bases, consistent with internationally recognised data protection frameworks:

• Contractual Necessity: Processing required to perform the contract between pkace and the Player — including account management, payment processing, and service delivery;
• Legal Obligation: Processing required to comply with applicable laws including anti-money laundering regulations, age verification mandates, and financial reporting requirements;
• Legitimate Interests: Processing that serves pkace's legitimate business interests — such as fraud prevention, platform security, and responsible gaming monitoring — where those interests are not overridden by the Player's rights;
• Consent: Where pkace has requested and received your explicit consent — for example, for marketing communications or optional personalisation features. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

05 Data Sharing & Disclosure

pkace does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only where strictly necessary:

5.1 Payment Processors

To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, 1LINK, and cryptocurrency channels, pkace shares transaction-relevant data with our verified payment processing partners. These partners operate under contractual data protection obligations and are prohibited from using your data for any purpose beyond payment facilitation.

5.2 Regulatory and Law Enforcement Authorities

pkace may disclose personal data to relevant regulatory bodies, financial intelligence units, or law enforcement agencies where required by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

5.3 KYC and Fraud Prevention Services

pkace works with identity verification and fraud detection service providers to validate player identities and protect platform integrity. These providers receive only the minimum data necessary to perform their function and are bound by strict confidentiality agreements.

5.4 Game and Technology Providers

Third-party game studios and technology vendors who power certain casino games or platform features may receive limited, aggregated, or pseudonymised data to ensure their services function correctly within the pkace environment. These providers do not receive identifiable personal data beyond what is operationally necessary.

06 Cookies & Tracking Technologies

pkace uses cookies and similar tracking technologies to operate and improve our platform. The types of cookies we use are as follows:

• Essential Cookies: Required for the platform to function correctly. These include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without impairing your ability to use pkace;
• Functional Cookies: Remember your preferences such as language selection, display settings, and game history so your experience is consistent across sessions;
• Analytics Cookies: Help us understand how players navigate the platform, which features are used most, and where usability improvements can be made. Analytics data is aggregated and does not identify you personally;
• Security Cookies: Used to detect fraudulent activity, unauthorised login attempts, and bot traffic to protect both the platform and our player community.

You can manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect platform functionality. pkace does not use advertising or cross-site tracking cookies.

07 Data Retention

pkace retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply:

• Account data: Retained for the duration of the account relationship and for a minimum of 5 years following permanent account closure, in accordance with AML record-keeping requirements;
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification, or longer if required by applicable financial regulations;
• Transaction records: Retained for a minimum of 5 years from the date of each transaction;
• Support communications: Retained for 3 years from the date of the last interaction in a given support thread;
• Gaming and session logs: Retained for 2 years from the date of activity, then anonymised for aggregate analytics purposes;
• Marketing consent records: Retained for the duration of your consent and for 1 year following withdrawal of consent as an audit record.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.

08 Data Security

pkace implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• Transport Security: All data in transit between your device and pkace servers is encrypted using TLS 1.2 or higher;
• Data at Rest: Sensitive personal and financial data stored on pkace infrastructure is encrypted using AES-256 encryption;
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited;
• Two-Factor Authentication: pkace supports and encourages two-factor authentication (2FA) for all player accounts as an additional layer of login security;
• Penetration Testing: pkace conducts regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited;
• Incident Response: In the event of a data breach affecting your personal data, pkace will notify affected players and relevant authorities within the timeframes required by applicable law.

09 Your Privacy Rights

As a pkace player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at the details provided in Section 14:

• Right of Access: You may request a copy of all personal data pkace holds about you. We will respond within 30 days of a verified request;
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated;
• Right to Erasure: Subject to our legal retention obligations, you may request deletion of your personal data. Requests will be assessed on a case-by-case basis. Note that data required for AML compliance cannot be deleted during the mandatory retention period;
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of data we hold;
• Right to Data Portability: You may request a structured, machine-readable export of the personal data you provided to pkace during account registration and use;
• Right to Object: You may object to the processing of your personal data for direct marketing or profiling purposes at any time. You may also object to processing based on legitimate interests, subject to our demonstrating compelling grounds;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

pkace will not charge a fee for exercising any of the above rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

10 Children & Minors

pkace uses date-of-birth verification at registration and conducts identity document checks as part of KYC procedures specifically to enforce this age restriction. Parents or guardians who believe their child may have created a pkace account should contact our support team immediately at [email protected] so that we can take appropriate action without delay.

11 International Data Transfers

pkace operates internationally and some of your personal data may be transferred to, stored on, or processed by systems located outside Pakistan. Where such transfers occur, pkace ensures that adequate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

These safeguards may include contractual clauses with data recipients, reliance on jurisdictions with recognised data protection frameworks, or other appropriate mechanisms. By using pkace, you consent to the transfer of your personal data as described in this section.

12 Third-Party Services

The pkace platform may include integrations with third-party game providers, payment gateways, and analytics tools. These third parties operate under their own privacy policies and pkace is not responsible for the data practices of external services once data has been passed to them under a legitimate processing arrangement.

pkace does not embed social media tracking pixels, cross-site advertising networks, or external analytics platforms that would allow third parties to build profiles of pkace players for advertising purposes. Any third-party integrations present on the pkace platform are strictly operational in nature.

13 Policy Updates

pkace reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players via email and/or a prominent notice on the pkace website at least 14 days before the revised Policy takes effect.

The effective date displayed at the top of this document will always reflect the most current version. Continued use of pkace following the effective date of an updated Policy constitutes acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how pkace protects your data.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy-related complaint, please contact the pkace Data Protection team through the following channels:

• Email: [email protected] — please include "Privacy Request" in your subject line for fastest routing
• Live Chat: Available 24/7 through your pkace account dashboard
• Response Time: pkace commits to acknowledging all privacy requests within 5 business days and resolving them within 30 calendar days

Where you are dissatisfied with pkace's response to a privacy complaint, you may escalate the matter to the relevant data protection authority or regulatory body in the jurisdiction under which pkace holds its operating licence. Details of the applicable supervisory authority will be provided upon request.