pak97 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how pak97 ("pak97", "we", "us", "our") collects, uses, stores, and discloses personal information from users ("you", "your", "the User") who access or use the pak97 website and online gaming platform (collectively, "the Platform") at pak97.net. This Policy applies to all personal data processed in connection with your registration, account management, gaming activity, payment transactions, and communications with pak97. By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy. This Policy is incorporated into and should be read alongside our Terms & Conditions.

2. Data Controller

pak97 operates as the data controller responsible for the personal information processed under this Policy. Our designated contact for all privacy-related matters is our Data Protection team, reachable via email at: [email protected]. For formal data subject requests, please use this contact address with the subject line "Privacy / Data Request".

3. Information We Collect

pak97 collects personal information in the following categories, depending on how you interact with the Platform:

We do not collect special categories of sensitive personal data (such as health information, biometric data, or religious beliefs) unless specifically required for responsible gaming purposes with your explicit consent.

4. How We Use Your Information

pak97 processes your personal data for the following purposes:

• Account Administration: To create, manage, and maintain your pak97 account, including login authentication and security monitoring.
• Service Delivery: To provide you with access to casino games, sports betting markets, and all other Platform features.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, bank transfer, card, or USDT TRC20, and to maintain accurate financial records.
• Identity Verification (KYC): To verify your identity and age (18+) in compliance with anti-money laundering obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited activities.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, to enforce self-exclusion requests, and to apply deposit limits.
• Customer Support: To respond to your queries, complaints, and technical support requests.
• Legal Compliance: To comply with applicable laws, regulations, and lawful requests from authorities.
• Marketing (where consented): To send you promotional offers, bonus notifications, and updates about pak97 services, where you have provided opt-in consent. You may withdraw consent at any time.

5. Legal Bases for Processing

pak97 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the agreement between you and pak97 (account operation, payment processing, service delivery).
• Legal Obligation: Processing required to comply with applicable anti-money laundering, age verification, and data protection laws.
• Legitimate Interests: Processing for fraud prevention, security, platform improvement, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Marketing communications and certain cookie categories, where you have given explicit opt-in consent. Consent may be withdrawn at any time without affecting prior processing.

6. Payment Data & Financial Information

Financial data — including JazzCash and Easypaisa account identifiers, HBL / UBL / Meezan Bank / Bank Alfalah account details, and PKR transaction records — is processed exclusively for the purpose of completing deposits, processing withdrawals, and conducting required financial compliance checks. pak97 does not store full card numbers or banking credentials on its own servers. Payment processing is handled via third-party payment service providers operating under their own security certifications. All financial data in transit is encrypted using TLS/SSL protocols. Transaction records are retained for the period required by applicable financial compliance obligations.

7. Cookies & Tracking Technologies

pak97 uses cookies and similar tracking technologies to operate the Platform, maintain session state, and analyse usage patterns. The categories of cookies used include:

• Essential Cookies: Required for Platform functionality including login sessions, security tokens, and load balancing. These cannot be disabled without disrupting Platform operation.
• Analytics Cookies: Used to understand how players interact with pak97 pages, which games are most visited, and where technical issues may arise. Analytics data is aggregated and anonymised where possible.
• Preference Cookies: Store your Platform preferences such as language or display settings.
• Marketing Cookies (consent required): Used to track the effectiveness of promotional campaigns. These are only placed where you have given explicit consent.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using pak97 core features.

8. Data Sharing & Third Parties

pak97 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly as necessary:

• Payment Processors: JazzCash, Easypaisa, acquiring banks, and card networks, to process your transactions.
• Identity Verification Providers: Third-party KYC and AML screening services used to verify your identity.
• Game Content Providers: Licenced game studios whose software powers games on pak97; these providers may process technical session data.
• IT & Hosting Providers: Cloud infrastructure and technical service providers who operate platform servers under confidentiality obligations.
• Regulators & Law Enforcement: Where required by applicable law, court order, or regulatory instruction, we may disclose data to competent authorities.

All third-party data processors engaged by pak97 are contractually required to handle your data in compliance with applicable data protection standards.

9. Data Retention

pak97 retains personal data for as long as your account is active and for the periods required by applicable legal, regulatory, and financial compliance obligations thereafter. As a general guide:

• Account and identity data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Communications and support records: Retained for three (3) years from the date of each interaction.
• Technical and usage logs: Typically retained for twelve (12) months, unless required for longer by a security investigation.

Upon expiry of the applicable retention period, data is securely deleted or anonymised.

10. Data Security

pak97 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit TLS/SSL encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls limiting data access to authorised personnel only, regular security assessments and vulnerability testing, and two-factor authentication options for user accounts. No system is completely immune to security risks. In the event of a data breach that poses a significant risk to your rights and freedoms, pak97 will notify affected users and relevant authorities as required by applicable law.

11. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by pak97:

• Right of Access: You may request a copy of the personal data pak97 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to our retention obligations under applicable law.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Where technically feasible, you may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, contact our Data Protection team at: [email protected]. We will respond to valid requests within thirty (30) days. We may require identity verification before processing your request.

12. Children's Privacy

pak97 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a user under 18 has registered or used the Platform, we will immediately close the account, void any transactions, and delete the associated personal data. If you believe a minor has accessed pak97, please contact us immediately at: [email protected].

13. Changes to This Policy

pak97 may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or Platform functionality. When material changes are made, we will notify registered users via email to the address on file. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy. We encourage you to review this page periodically.

14. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or how pak97 handles your personal data, please contact our Data Protection team: [email protected]. We are committed to resolving all privacy queries promptly and fairly. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.